MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/33

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

769–792 of 1,620 · ranked by trust score, then stars

avatar-agent-mcp

nirholas/avatar-agent-mcp

✓SAFE B

3D AI Agent Avatar — MCP server that spawns a textured GLB avatar, inspects/validates/optimizes any 3D model, gives the agent a Solana wallet + a voice, and ships full pump.fun powers (atomic Jito-bundled launches + creator-fee collection). Powered by three.ws.

★ 71 readstdio

jev-mcp

rashedInt32/jev-mcp

✓SAFE B

MCP server exposing TypeSafe Jev as typed, calibrated judgment tools: classify, score, check, batched ask. Ships as a Claude Code plugin.

★ 77 readstdio

mneme

AgentGameLab/mneme

✓SAFE B

Persistent long-term memory for Claude Code agents — SQLite + FTS5 + sqlite-vec + RRF hybrid recall over MCP, with Chinese tokenization. Local-first, graceful degradation.

★ 72 readstdio

threews-avatar-mcp

nirholas/threews-avatar-mcp

✓SAFE B

MCP server for three.ws 3D avatars by three.ws — render a live, rotatable on-chain avatar inline (interactive MCP App), get a paste-anywhere embed iframe, or fetch avatar metadata. Free, no API key.

★ 72 readstdio

token-naming-mcp

nirholas/token-naming-mcp

✓SAFE B

Resolve Solana .sol names and check *.threews.sol agent-identity availability from any AI agent. sns_resolve maps a .sol name to its owner wallet, sns_reverse maps a wallet to its primary name, and threews_availability checks whether a three.ws agent handle is free to claim. No key, no signer, no pa

★ 71 readstdio

x402-bridge

nirholas/x402-bridge

!CAUTION B

MCP stdio bridge that turns any x402-paid HTTP endpoint into a Claude-callable tool. Auto-pays via the @x402 client (EVM exact, SVM exact, EVM batch-settlement) and pre-loads tools from the Coinbase x402 Bazaar.

★ 73 readstdio

Florentine.ai MCP Server - Talk to your MongoDB & MySQL data

florentine-ai/mcp

✓SAFE B

MCP server for Florentine.ai - Natural language to MongoDB aggregations

★ 62 readstdio

gyazocli

yuiseki/gyazocli

✓SAFE B

Fast, script-friendly CLI for Gyazo

★ 69 readstdio

mcp-mindmesh

7ossamfarid/mcp-mindmesh

✓SAFE B

Claude 3.7 Swarm with Field Coherence: A Model Context Protocol (MCP) server that orchestrates multiple specialized Claude 3.7 Sonnet instances in a quantum-inspired swarm. It creates a field coherence effect across pattern recognition, information theory, and reasoning specialists to produce optima

★ 64 readsse

poordjaevin

Icaro0310/poordjaevin

!CAUTION B

Djævin: calibrated local-first decision layer with a Devin ACP backend - no API key needed

★ 610 readstdio

Kura

kurajs/kura

✓SAFE B

Kura — the knowledgebase for humans and agents. Agent-native docs infrastructure, built on June.

★ 51 read

dekko

aahlijia/dekko

✓SAFE B

Static code map generator (MAP.md + map.json) powered by tree-sitter — a Claude Code /map plugin and MCP server that gives coding agents call graphs, file outlines, and impacted-test lookups without spending tokens on parsing.

★ 51 readstdio

oura-mcp

daveremy/oura-mcp

✓SAFE B

Standalone Oura Ring CLI, MCP server, and Claude Code skill

★ 410 readstdio

MCP DateTime

odgrim/mcp-datetime

✓SAFE B
★ 44 readsse

crafterwiki

RikepilB/crafterwiki

✓SAFE B

Provenance-first wiki of hackathon winners and submissions, with a demo-first planning harness (CLI, MCP server, static API, Astro site, Claude Code plugin).

★ 48 read

dealflowpro-mcp-server

jbechtel-97/dealflowpro-mcp-server

✓SAFE B

DealFlowPro MCP Server — Analyze multifamily real estate deals from Claude Code or Claude Desktop

★ 44 readstdio

endfield-mcp

3aKHP/Endfield-MCP

✓SAFE B

MCP Server for Arknights: Endfield fan creation (TypeScript / Bun, stdio + Streamable HTTP).

★ 419 readstdio

mealie-mcp

2fst4u/mealie-mcp

✓SAFE B
★ 41 readstdio

skillz

mugoherick12-boop/skillz

!CAUTION B

🛠️ Enable skills in any MCP client with Skillz, a server converting Claude-style skills into callable tools for seamless integration.

★ 41 read

supabase-mcp

Cappahccino/SB-MCP

✓SAFE B

Supabase Model Context Protocol (MCP) server for CRUD operations and Edge Functions

★ 46 readstdio

Unity-Developer-Tools

TMHSDigital/Unity-Developer-Tools

✓SAFE B

AI-powered development toolkit for Unity game development in Cursor IDE. 18 skills, 8 rules, 4 MCP tools, 20 snippets, 5 templates covering the full Unity lifecycle.

★ 44 readstdio

Ai

fluttersdk/ai

✓SAFE B

Teach your AI assistant Wind UI, Magic Framework and more, across every major coding tool. Skills, a Claude Code marketplace and a hosted MCP server.

★ 32 readstdio

aliensec-mcp-server

VRIL-LABS/aliensec-mcp-server

✓SAFE B

👽 The AlienSec MCP Server is an AlienVault OTX endpoint security scanning MCP server with VirusTotal integration.

★ 315 read

bible-mcp

nirajagarwal/bible-mcp

✓SAFE B

MCP server for Christian scholarship: BSB/WEB scripture, Greek/Hebrew word data, cross-references, patristic texts, and semantic search.

★ 316 readstreamable-http

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.