MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/34
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
793–816 of 1,620 · ranked by trust score, then stars
CloakBrowser-Agent
CloakHQ/CloakBrowser-Agent
Jev-powered stealth browser agent. TypeSafe Jev decides each step in ~0.3 s, CloakBrowser carries it out like a human. MCP server, CLI and Python API.
context-compression
herreravalenz6620/context-compression
Reduce token usage for JSON, CSV, and TSV files with deterministic compression that keeps data intact for AI agents.
korean-dart-mcp
aesthetic-legalism5470/korean-dart-mcp
Access OpenDART financial data and corporate filings via MCP. Analyze disclosures, financial statements, and XBRL data directly in your AI assistant.
promptwheel-ai-logbook
promptwheel-ai/logbook
Turn Git history into memory AI coding agents can use.
release-intel-mcp
barissozudogru/release-intel-mcp
Auditable release evidence from commits, pull requests, issues, and contributors between two Git refs, over MCP or CLI.
string-ai-mcp
usestring/string-ai-mcp
Model Context Protocol server for the Web Access API.
tanilo-mcp
TKCollective/tanilo-mcp
MCP server for Tanilo (formerly AgentOracle): connects MCP clients to the Tanilo API. npm package: agentoracle-mcp.
test-intel-mcp
barissozudogru/test-intel-mcp
Local test coverage intelligence for JavaScript and TypeScript: gaps, complexity, and practical test priorities over MCP or CLI.
Adguardctrl
lidless-labs/adguardctrl
One bad call can take down your DNS filtering. adguardctrl gates every AdGuard Home write behind confirm and destructive flags. CLI plus MCP adapter, no daemon.
comparedge-llm-cost
comparedge/llm-cost-mcp
MCP server: token cost math for LLM API calls, 69 models across 17 providers, prices verified by ComparEdge
comparedge-price-watch
comparedge/price-watch-mcp
MCP server: verified SaaS price-change history, watch-log for AI assistants, data by ComparEdge
firmauy-mcp-inspect
carlosplanchon/firmauy-mcp-inspect
Read-only MCP server that brings FirmaUY signature inspection to your AI assistant. Offline, no smart card, no signing, redacted by default.
hubmesh
DemigodDSK/hubmesh
Centrality-aware GraphRAG retrieval planner — drop-in layer over any vector DB. Zero LLM in the query path; MCP server included.
Layout-debug-mcp
AntonChuraev99/Layout-debug-mcp
Point at a layer in a live UI (web DOM, Android Compose), drag it on the real screen, hand it to your AI agent via MCP
mcp-eval
cavi-ai/mcp-eval
🧐 Privacy-preserving MCP server evaluation: deterministic CI probe battery (18 probe kinds, readiness score, SARIF) plus production friction capture with findings that verify and close
mcp-server
negm17111995/mcp-server
Remote MCP server for hotel and flight search on MAQAMI (3M+ hotels). Search live rates, read hotel details, then send the customer a secure checkout link on book.maqami.co. Streamable HTTP, no API key.
DuckDuckGo MCP Server
ericthered926/duckduckgo-mcp-server
an mcp server to access DuckDuckGo
adsmart-app
ZenniTTy/adsmart-app
Gerencie suas campanhas do Google Ads conversando com o Claude. Extensão open source para o Claude Desktop (MCPB), 100% local, com prévia, confirmação e desfazer.
agentRamen
palrajjp/agentRamen
Local-first codebase intelligence memory and task context for coding agents, via CLI, MCP, and local HTTP.
askjev
pZacca/askjev
Unofficial MCP server for Jev (Typesafe AI)
capitoline
marco-fabbri/capitoline
Self-hosted OpenAI-compatible gateway and MCP server over the official Claude Code, Codex and Antigravity CLIs, with a council of models
chrischall-hemnet
chrischall/hemnet-mcp
Hemnet.se real estate for Claude: search, sold prices, listings & market stats
cloudscape-docs-mcp
prem676/cloudscape-docs-mcp
🌐 Enable seamless semantic search over AWS Cloudscape documentation for AI agents and coding assistants with this efficient MCP server.
crawlora-mcp
Crawlora-org/crawlora-mcp
Hosted MCP server for structured public web data: 3,631 tools across 471 platform groups (search, maps, e-commerce, social, finance, app stores), returning clean JSON. Works with Claude, Cursor, VS Code and any MCP client.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?