MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/3
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
49–72 of 1,620 · ranked by trust score, then stars
Obsidian
stevenstavrakis/obsidian-mcp
A simple MCP server for Obsidian
A-Share
24mlight/a-share-mcp-is-just-i-need
Workers
cloudflare/workers-mcp
Talk to a Cloudflare Worker from Claude Desktop!
Apple Doc
mightydillah/apple-doc-mcp
MCP server providing seamless access to Apple Developer Documentation with smart search and wildcard support
Corbell
corbell-ai/corbell
AI-powered spec generation and review using multi-repo code graph intelligence for backend teams that ship to production.
Google Search
web-agent-master/google-search
A Playwright-based Node.js tool that bypasses search engine anti-scraping mechanisms to execute Google searches. Local alternative to SERP APIs with MCP server integration.
bm.md
miantiao-me/bm.md
更好用的 Markdown 排版助手|专为微信公众号与多平台排版设计,支持富文本复制、图片生成与矢量 PDF 导出。
YouTube Transcript
kimtaeyoon83/mcp-server-youtube-transcript
This is an MCP server that allows you to directly download transcripts of YouTube videos.
Wire
0xkoda/wiremcp
An MCP for WireShark (tshark). Empower LLM's with realtime network traffic analysis capability
X64dbg
wasdubya/x64dbgmcp
Model Context Protocol for x64dbg & x32dbg
YouTube
zubeidhendricks/youtube-mcp-server
MCP Server for YouTube API, enabling video management, Shorts creation, and advanced analytics
WeRead
freestylefly/mcp-server-weread
微信读书MCP
Todoist MCP Server
Doist/todoist-mcp
A set of tools to connect to AI agents, to allow them to use Todoist on a user's behalf. Includes MCP support.
Todoist
doist/todoist-mcp
A set of tools to connect to AI agents, to allow them to use Todoist on a user's behalf. Includes MCP support.
Airbnb
openbnb-org/mcp-server-airbnb
Search Airbnb using your AI Agent
YouTube
anaisbetts/mcp-youtube
A Model-Context Protocol Server for YouTube
Pg-Mcp
stuzero/pg-mcp-server
Kagi
kagisearch/kagimcp
The Official Model Context Protocol (MCP) server for Kagi Search & other tools.
MotherDuck
motherduckdb/mcp-server-motherduck
Local MCP server for DuckDB and MotherDuck
Web Agent Protocol
ota-tech-ai/web-agent-protocol
🌐Web Agent Protocol (WAP) - Record and replay user interactions in the browser with MCP support
Youtube Transcript
jkawamoto/mcp-youtube-transcript
MCP server retrieving transcripts of YouTube videos
Google Map
cablate/mcp-google-map
18 Google Maps tools and 3 Agent Skills for place search, routes, travel planning, and local SEO—via MCP or standalone CLI.
Weixin Reader
bwkyd/wexin-read-mcp
能够让大模型阅读微信公众号文章,使用浏览器模拟绕过反爬虫。
Baidu Maps
baidu-maps/mcp
Baidu Map MCP Server
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?