MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/31
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
721–744 of 1,620 · ranked by trust score, then stars
Crawl4AI
ritvij14/crawl4ai-mcp
Ecovacs
ecovacs-ai/ecovacs-mcp
Ecovacs MCP Server
Elysia
keithagroves/elysia-mcp
Model Context Protocol (MCP) Server for Bun and Elysia
File Preview
seanivore/mcp-file-preview
MCP server for HTML file preview and analysis - Has been weird with OS but good on Cline so WIP
Grep Server
erniebrodeur/mcp-grep
simple mcp server to wrap the local instance of grep.
Jensenify
kenm47/jensenify-mcp
An MCP server that helps engineers achieve Jensen Huang's recommended $250k/year compute spend by injecting ~2.9M tokens of canonical Western literature into every AI interaction. Deep humanistic context for every engineering decision.
Korean Spell Checker
winterjung/mcp-korean-spell
MCP(Model Context Protocol) server designed for Korean spell checking
Langchain Mcp Tools Ts
hideya/langchain-mcp-tools-ts
MCP to LangChain Tools Conversion Utility / TypeScript
Limitless
199-mcp/mcp-limitless
Advanced MCP Server with AI-powered Limitless API features: natural time queries, meeting detection, action item extraction, daily summaries, and speaker analytics
Mcp Client Agent
shane-kercheval/mcp-client-agent
CLI that uses DSPy to interact with MCP servers.
Observer
hesreallyhim/mcp-observer-server
An MCP server that provides server-to-client notifications for file changes that the client subscribes to
Oi-Wiki
shwstone/mcp-oi-wiki
🌟 Wiki of OI / ICPC for LLMs. (面向大模型的某大型游戏线上攻略,内含炫酷算术魔法)
Patchright Lite
dylangroos/patchright-mcp-lite
Patchright (Playwright patch) MCP server for lightweight models
Qwen Max
66julienmartin/mcp-server-qwen_max
MCP server for Qwen Max model
Smart Photo Journal
siddhant-k-code/memory-journal-mcp-server
MCP server designed to help you search and analyze your photo library (iCloud - Apple photos)
Tailscale Echo
remyguercio/tailscale-mcp-echo
Identity aware MCP server example using Tailscale serve.
You.com DX Toolkit
youdotcom-oss/dx-toolkit
STDIO bridge for the hosted You.com MCP server at https://api.you.com/mcp.
Anti-Bullshit
bmorphism/anti-bullshit-mcp-server
MCP server for analyzing claims, validating sources, and detecting manipulation using multiple epistemological frameworks
Medical APIs
pascalwhoop/medical-mcps
A collection of MCP tools for AI agents to interact with major biomedical databases
Meta Discovery
wojtyniak/mcp-mcp
Meta-MCP Server that acts as a tool discovery and provisioning service for the Model Context Protocol
Nobitex
xmannii/nobitex-mcp-server
a Model Context Protocol (MCP) server that provides access to cryptocurrency market data from the Nobitex API.
Screenshot
kazuph/mcp-screenshot
Repository for MCP screenshot functionality
Stadia Maps
stadiamaps/stadiamaps-mcp-server-ts
A TypeScript MCP server for interacting with the Stadia Maps APIs
Twitter RapidAPI
vaibhavgeek/twitter-rapidapi-mcp-x
Twitter-RapidAPI-MCP-X is a lightweight API available on RapidAPI that provides streamlined access to Twitter data, including tweets, user info, and trending topics. It's perfect for building social media analytics and monitoring tools.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?