MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/29

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

673–696 of 1,620 · ranked by trust score, then stars

Jira

camdenclark/jira-mcp

✓SAFE B
★ 282 readstdio

New Relic

ivlad003/mcp_newrelic

✓SAFE B
★ 281 read

Openapi Mcp Generator

abutbul/openapi-mcp-generator

✓SAFE B

A Python tool that automatically converts OpenAPI(Swagger, ETAPI) compatible specifications into fully functional Model Context Protocol (MCP) servers. Generates Docker-ready implementations with support for SSE/IO communication protocols, authentication, and comprehensive error handling. https://py

★ 2829 readsse

Video Digest

r-lz/mcp-video-digest

✓SAFE B

MCP Server for transcribing videos via video links and summarizing video content

★ 281 readsse

Aibolit

cqfn/aibolit-mcp-server

✓SAFE B

MCP Server for Aibolit Java Static Analyzer: Helping Your AI Agent Identify Hotspots for Refactoring

★ 271 readstdio

CloudWatch Logs

serkanh/cloudwatch-logs-mcp

✓SAFE B
★ 272 readstdio

Code Analysis

saiprashanths/code-analysis-mcp

✓SAFE B
★ 274 readstdio

Figma Pro

artemsvit/figma-mcp-pro

✓SAFE B
★ 2712 readstdio

Instantly

bcharleson/instantly-mcp

✓SAFE B

MCP Server for Instantly v2 API

★ 271 readstdio

Lightdash

syucream/lightdash-mcp-server

✓SAFE B

A MCP(Model Context Protocol) server that accesses to Lightdash

★ 2713 readstdio

MediaWiki

shiquda/mediawiki-mcp-server

✓SAFE B

A MCP server that allows you to search and retrieve content on any wiki site using MediaWiki with LLMs 🤖 wikipedia.org, fandom.com, wiki.gg and more sites using Mediawiki are supported!

★ 272 readstreamable-http

Onyx

lupuletic/onyx-mcp-server

✓SAFE B
★ 272 readstdio

Rime

matthewdailey/rime-mcp

✓SAFE B

MCP server for Rime

★ 271 readstdio

Riot

jifrozen0110/mcp-riot

✓SAFE B

League of Legends MCP Server

★ 275 read

Rss Aggregator

imprvhub/mcp-rss-aggregator

✓SAFE B

Model Context Protocol Server for aggregating RSS feeds in Claude Desktop

★ 273 readstdio

Vods

aahl/mcp-vods

✓SAFE B

📺 MCP Server for Binge-watch / MoonTV / LunaTV. 一个用于追剧/追番的MCP服务器,为AI提供搜索影视播放地址的能力,并支持在小米电视上直接播放

★ 271 readstdio

Web Browser

random-robbie/mcp-web-browser

✓SAFE B

An advanced web browsing server for the Model Context Protocol (MCP) powered by Playwright, enabling headless browser interactions through a flexible, secure API.

★ 276 read

AppInsight

jiantaofu/appinsightmcp

✓SAFE B
★ 2620 readstdio

Balldontlie

mikechao/balldontlie-mcp

✓SAFE B

An MCP Server implementation that integrates the Balldontlie API, to provide information about players, teams and games for the NBA, NFL and MLB

★ 264 readstdio

Coin

pwh-pwh/coin-mcp-server

✓SAFE B

use Bitget’s API to get cryptocurrency info

★ 263 read

Jira Context

rahulthedevil/jira-context-mcp

✓SAFE B

MCP server to provide Jira Tickets information to AI coding agents like Cursor

★ 265 readsse

Language Server

alexwohletz/language-server-mcp

✓SAFE B
★ 263 readstdio

Line Summary

yung13yubabie/line-summary

✓SAFE B

在 Windows 上用 Claude Code 讀本機 LINE 電腦版聊天記錄、產生每日摘要的 MCP server(wxSQLite3/aes128cbc 解密)

★ 264 readstdio

Mcp-Client-X

rggh/mcp-client-x

✓SAFE B

Python MCP client + server example

★ 262 read

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.