MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/35
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
817–840 of 1,620 · ranked by trust score, then stars
danielortiz0220-nyc-restrooms
danielortiz0220/nyc-restroom-mcp
Find NYC public restrooms and their latest Parks inspection status, from NYC Open Data
faceit-mcp
saivi3171/faceit-mcp
Connect Claude to live CS2 FACEIT data to retrieve player stats, match history, ELO trends, and head-to-head comparisons via the Model Context Protocol.
gfc
jjjorfi/gfc
git-for-context — LLM context dedup: unchanged file re-reads collapse to hash-verified stubs, changed files return diffs. OpenCode plugin + zero-dep MCP server. Measured −34% per-turn context.
goaimoat-ai-visibility-mcp
jayniebingyu-cyber/goaimoat-ai-visibility-mcp
GoAI Moat - AI Visibility Audit MCP server. Diagnose a brand visibility in AI answers (ChatGPT, Perplexity, AI Overviews). https://mcp.goaimoat.com/mcp
graphmaxer-gw1
Graphmaxer/gw1-mcp
GW1 build compiler MCP server: skill data, template code encode/decode, validation, hero roster. Read-only.
internet-radio-mcp
AlonDrilich/internet-radio-mcp
MCP server for internet radio: search 50,000+ stations, get stream URLs, top/trending stations, countries and genres (Radio Browser public-domain data). By 72FM.
kazkozdev-abscissa
KazKozDev/abscissa
A safety-aware MCP server that lets AI agents manage Linear issues, projects, cycles, and dependencies.
local-terminal-mcp
luckysolanki902/local-terminal-mcp
Run local commands from ChatGPT or Claude via a safe, allowlisted MCP server. Work on your codebase and generate images/sprites/assets locally from ChatGPT without spending Codex/API tokens. stdio for Claude Desktop/Code; capability-URL or bearer auth over HTTP for ChatGPT via ngrok or cloudflared.
machinegrade-validate
machinegrade/validate
Deterministic validation for AI-generated artifacts: JSON Schema, OpenAPI response, SQL. Typed verdicts with fix hints. Metered API + MCP.
MCP-Ambari-API
call518/MCP-Ambari-API
🚀 Natural-language Hadoop cluster management via MCP. Connect LLM agents (Claude, GPT, etc.) directly to Apache Ambari REST API — control services, inspect configs, query metrics, and manage alerts with AI. Built with FastMCP & aiohttp.
mcp-atlas
urbankitstudio/mcp-atlas
MCP server: find a US county's official parcel ArcGIS endpoint and search it by owner name or APN. No API key. npx -y @urbankitstudio/mcp-atlas
mcp-marmiton
smeet666/mcp-marmiton
MCP server for Marmiton: search French recipes and scale ingredient quantities to any number of servings. No API key.
mcp-server
TranscriptFetch/mcp-server
MCP server for TranscriptFetch: transcripts from YouTube, TikTok, Instagram and media URLs, with AI transcription when captions are missing, plus YouTube search, channel and playlist listing, from any MCP client.
mcp-server-axiom
ThetaBird/mcp-server-axiom-js
MemAI
Filipe-Soares-de-Almeida/MemAI
Long-term memory MCP server for AI agents — one ACID SQLite file, FTS5 BM25 retrieval, nested domains, diagrams and a local curation dashboard
mohsinmshabbir-datasaudi
mohsinmshabbir/datasaudi-mcp
Saudi economic data for Claude, Cursor & any MCP client — English or Arabic, keyless. Refuses to silently mislead.
moodle-mcp-server
csmediapro/moodle-mcp-server
Open-source MCP server that connects AI agents to Moodle LMS data through Moodle Web Services.
orion-celestia-intel
orioninfra/orion-agent-kit
Celestia network intelligence for AI agents: MCP server over Orion's daily analysis. Read-only.
PaperCortex
chetanmorey1/PaperCortex
Organize and search Paperless-ngx documents with local AI, auto-classification, receipt extraction, and accounting export.
propline-mcp
proplineapi/propline-mcp
Live odds, cross-book +EV and graded player-prop results across 37 books. Hosted endpoint included.
scopewalker-mcp
timohaa/scopewalker-mcp
Codebase analysis MCP server for AI agents: complexity metrics, size thresholds, prop drilling, and code smell detection built on tree-sitter and tokei.
songcheck
afghanfansmedia-ai/songcheck-mcp
Is this song AI or human? Detect AI-generated music (Suno, Udio, and more) from any AI agent. MCP server by Khaled Media.
sovantica-engrava
sovantica/engrava-mcp
Model Context Protocol server for Engrava — expose an AI agent memory database to any MCP client (Claude Desktop, Cursor, VS Code...) over stdio.
substack-mcp-cli
thenavidm/substack-mcp-cli
Substack MCP server and CLI for Claude Code, Codex and AI agents. 65 tools for drafts, posts, Notes, subscribers, analytics, tags, comments, and researching other writers.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?