MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/36
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
841–864 of 1,620 · ranked by trust score, then stars
trace.moe-mcp
soruly/trace.moe-mcp
Model Context Protocol (MCP) server for trace.moe anime scene search
web
GuionAI/web
A web research toolkit with multi-provider search and clean Markdown extraction from static and JavaScript-rendered pages, plus public code and library docs search—available via CLI and MCP.
web-search-mcp
awslew/web-search-mcp
编码 agent 查资料缺搜索 API key?免 key 搜多个引擎、优先可靠来源并抽取可读正文。 Search the web and read pages without an API key.
Fibel
k2b-dev/fibel
Docs first - everything else later
@orboto/mcp
orboto/orboto-mcp
MCP TypeScript SDK !
redocly-contrib/mcp-typescript-sdk
The official TypeScript SDK for Model Context Protocol servers and clients
aemet-client
Alysiadeceptive64/aemet-client
Access Spanish weather data through a TypeScript SDK and Model Context Protocol server for the AEMET OpenData API.
aeo-geo-mcp
SEOSiri-Official/aeo-geo-mcp
A sovereign, local-first MCP server for AI Engine Optimization (AEO), Generative Engine Optimization (GEO), llm.txt auditing, and content stickiness analytics.
agentsafepath
saviodamato/agentrank-mcp
Find real, verifiable businesses with provenance and source URLs - for AI agents.
AIMentionTracker
aimentiontracker/mcp
MCP server for AIMentionTracker — let Claude, Cursor and other MCP clients read how often ChatGPT, Claude, Gemini, Perplexity and Google AI Overviews name and cite your brand
aioproductos
aioproductos/claude-plugin
Official AIOProductOS plugin for Claude Code — connect your workspace (39 MCP tools) and run evidence-backed weekly product triage
airlock-rls-mcp
mateuszingano/airlock-rls-mcp
MCP server: let Cursor / Claude Code check a Supabase app for an exposed service_role key and broken RLS while it builds it
biopharma-mcp
SEOSiri-Official/biopharma-mcp
An open-source, local-first Model Context Protocol (MCP) server written in TypeScript for **Biopharma Software Infrastructure, FDA 21 CFR Part 11 GxP Audit Trailing, CDISC SDTM/Allotrope Data Exports, 4PL Dose-Response Curve Fitting, and HIPAA PII/PHI Redaction**.
biorobotics
SEOSiri-Official/biorobotics
An open-source, stateless Model Context Protocol (MCP) framework bridging biological datasets (NCBI/UniProt) with deterministic physical coordinates for robotic automation.
bitmacrocode-charm
bitmacrocode/charm-mcp
MCP server: authoritative OEM automotive repair data (part numbers, torque specs, procedures) for 1982-2013 vehicles, from factory service manuals. Built for AI agents.
bubble-agent-mcp
0308ya9392/bubble-agent-mcp
Find emerging conversations before they blow up. An MCP server that brings live Bubble Agent trend intelligence to Claude, Codex, Cursor, and more.
career-workspace-ambujsystems
Ambuj123-lab/career-workspace-ambujsystems
Evidence-Grounded Career Workspace & Claim-Validation Engine • Real-Time Company Intelligence • 0% Overclaim Guarantee
claude-conf
Vleickzs/claude-conf
Streamline Claude Code with a modular config toolkit for faster, cleaner terminal workflows
codeparse
cmgoffena13/codeparse
Give agents fast, accurate, and compact context on your Python codebases
content-schema-mcp
SEOSiri-Official/content-schema-mcp
An open-source, local-first (MCP) server for Automated Schema org JSON-LD Generation, GA4 Metric Validation, llm.txt Auditing
crawler
mark1russell7/crawler
polite-crawler: a polite web crawler for research and AI agents. Fetch once, keep it, read it many times. robots.txt, one request per site, full-text search, MCP server.
Currensor
Kay0sstheory/Currensor
Live currency converter — a one-file web app, plus a free plugin for Claude and ChatGPT with an in-chat card. 166 currencies, no sign-in.
dns-sec-audit-mcp
SEOSiri-Official/dns-sec-audit-mcp
A sovereign, local-first MCP server for Technical SEO DNS record auditing, SOA health checks, SSL/TLS inspection, and HTTP security header analysis.
etl-pipeline-mcp
SEOSiri-Official/etl-pipeline-mcp
A sovereign, local-first MCP-Native ETL System with Hot/Cold tiering, PII scrubbing, ID stitching, Parquet buffers, and data warehouse exports.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?