MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/28
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
649–672 of 1,620 · ranked by trust score, then stars
Obsidian Omnisearch
anpigon/mcp-server-obsidian-omnisearch
An MCP server that enables searches within Obsidian vaults using the Omnisearch plugin API. Returns absolute paths to matching notes for seamless integration. 🚀
Outsource
gwbischof/outsource-mcp
Give your AI assistant its own AI assistants.
PM Copilot
dkships/pm-copilot
MCP server that triangulates customer support tickets and feature requests to help PMs decide what to build next
Pulse
orliesaurus/pulsemcp-server
An MCP server that helps you find MCP servers that are listed on PulseMCP.com
Skills
skills-mcp/skills-mcp
Bring Claude's Skills pattern to any MCP-compatible agent
3GPP
edhijlu/3gpp-mcp-server
Android Code Search
steveday763/cs_android_mcp
Claude Auto-Approve
pynesys/claude_autoapprove_mcp
An MCP server to inject auto-approve MCP functionality into Claude Desktop
Cowork Semantic Search
zhubit/cowork-semantic-search
Demo Implementation
mschwarzmueller/demo-mcp-server-client-implementation
A demo implementation of a MCP server (consuming a dummy API) and basic client.
Excel Reader
archimedescrypto/excel-reader-mcp
A Model Context Protocol (MCP) server for reading Excel files with automatic chunking and pagination support. Built with SheetJS and TypeScript.
Forensic Toolkit
axdithyaxo/mcp-forensic-toolkit
Secure AI-enabled digital forensics toolkit built with Model Context Protocol
iMessage
wyattjoh/imessage-mcp
A Model Context Protocol server for reading iMessage data from macOS.
Jina AI Reader
spences10/mcp-jinaai-reader
🔍 Model Context Protocol (MCP) tool for parsing websites using the Jina.ai Reader
Linkup
linkupplatform/linkup-mcp-server
Linkup MCP server for web search and fetching web content
Magento 2 LSP
mage-os-lab/magento2-lsp
Language Server (LSP) and MCP server for Magento 2 - provides go-to-definition, references, and rename across PHP, XML, and layout files.
Moneybird
vanderheijden86/moneybird-mcp-server
Moneybird MCP Server - AI-powered bookkeeping
Music Analysis
hugohow/mcp-music-analysis
Integrate librosa, whisper with LLMs to analyze music audio.
RedNote
milescool/rednote-mcp
RedNote MCP - Xiaohongshu Content Search Tool
Textin
intsig-textin/textin-mcp
Agrobr
bruno-portfolio/agrobr-mcp
MCP server for Brazilian agricultural data — connect LLMs to 10 public data sources via agrobr
Baidu Search
evilran/baidu-mcp-server
Baidu Search MCP Server I A Model Context Protocol (MCP) server that provides web search capabilities through Baidu, with additional features for content fetching and parsing.
Bonnard
bonnard-data/bonnard
Archived. Earlier Bonnard product. Current: bonnard.dev / @bonnard/mcp-charts
Jina AI
joebuildsstuff/mcp-jina-ai
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?