MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/30
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
697–720 of 1,620 · ranked by trust score, then stars
OLS
seandavi/ols-mcp-server
A model context protocol (MCP) server for the EBI Ontology Lookup Service (OLS)
PDB
augmented-nature/pdb-mcp-server
A Model Context Protocol (MCP) server that provides access to the Protein Data Bank (PDB) - the worldwide repository of information about the 3D structures of proteins, nucleic acids, and complex assemblies.
Screenshot Website Fast
chongzixuan-ai/mcp-server-website
Quickly screenshots webpages and converts to an LLM friendly size
Yelp
yelp/yelp-mcp
MCP server for exposing tools powered by Yelp's data
MCP Server for Ticketmaster
delorenj/mcp-server-ticketmaster
A Ticketmaster MCP server that provides query capabilites from the Discovery API
Amazon Bedrock
zxkane/mcp-server-amazon-bedrock
Model Context Procotol(MCP) server for using Amazon Bedrock Nova Canvas to generate images
Ant Design Components
hannesj/mcp-antd-components
ArXiv Reader
younesbensafia/arxiv-reader-mcp
Want to search arXiv papers, fetch metadata, and extract full-text PDFs without leaving your editor? This MCP server connects any MCP-compatible client (Claude Code, etc.) directly to arXiv.
Binary Analysis
ap3x/binaryanalysis-mcp
MCP server for analyzing PE, ELF, and Mach-O binaries using LIEF
BioRxiv
jackkuo666/biorxiv-mcp-server
🔍 Enable AI assistants to search and access bioRxiv papers through a simple MCP interface.
Cursor DB
jbdamask/cursor-db-mcp
Model Context Protocol server for querying Cursor chat history
Design System
yajihum/design-system-mcp
Flux Studio
jmanhype/mcp-flux-studio
A Model Context Protocol server for Flux image generation, providing tools for image generation, manipulation, and control
Gemini Tutorial
guibibeau/mcp-gemini-tutorial
Building MCP Servers with Google Gemini
GitBook
rickysullivan/gitbook-mcp
A Model Context Protocol (MCP) server that provides access to GitBook's API for AI assistants and LLM applications.
Grok
bob-lance/grok-mcp
MCP server for Grok AI API integration
Inkeep
inkeep/mcp-server-python
Inkeep MCP Server
Kali Go
found-cake/kali-mcp-go
MCP runtime for AI-assisted security testing with Kali tools, explicit target controls, bounded scanning, structured evidence, and persistent Docker deployment.
Obsidian Graph
drewburchfield/obsidian-graph
Semantic knowledge graph navigation for Obsidian or markdown vaults using AI-powered vector embeddings and PostgreSQL+pgvector
Roo Logger
annenpolka/roo-logger
An MCP server for logging activity in Roo Code/Cline.
Think
marcopesani/think-mcp-server
A minimal MCP Server based on the Anthropic's "think" tool research
Ticketmaster
delorenj/mcp-server-ticketmaster
A Ticketmaster MCP server that provides query capabilites from the Discovery API
Vibe Composer
mikeborozdin/vibe-composer-midi-mcp
CoolPC
shyuan/coolpc-mcp-server
利用「原價屋」估價資料作為生成電腦設備估價單的 MCP Server
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?