MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/37
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
865–888 of 1,620 · ranked by trust score, then stars
fasuizu-br-brainiall-tts
fasuizu-br/brainiall-tts-mcp
Hosted pay-per-use text-to-speech MCP server — 54 neural voices, 9 languages incl. Brazilian Portuguese. $0.008/1K chars, $10 free credits.
flowchart-mcp-server
Lawsonseminiferous124/flowchart-mcp-server
Generate academic quality flowcharts from text or code through this local MCP server that renders SVG graphs using Graphviz.
goaimoat-ai-visibility-cn-mcp
jayniebingyu-cyber/goaimoat-ai-visibility-cn-mcp
AI visibility audit MCP
goaimoat-web-scrape-mcp
jayniebingyu-cyber/goaimoat-web-scrape-mcp
URL to clean Markdown for AI agents. 2 tools: scrape_url (one page) and crawl_website (whole site). Blocked or paywalled pages are reported honestly, never invented. Hosted endpoint at scrape.mcp.goaimoat.com/mcp, free 3 calls per email, no card. A cheaper Firecrawl alternative; also runs locally vi
hedging8563-tokenlab
hedging8563/tokenlab-mcp-server
OpenAPI-generated MCP server for TokenLab model discovery, pricing, chat, native System One decisions, media, files, embeddings, webhooks and async tasks.
ilinxa-capture
yuniirhm/ilinxa-capture
Extract video frames and compose AI-readable grid sheets for multimodal LLM pipelines, self-hosted via REST, Web UI, or MCP.
indian-stock-market-mcp
ratan-systems/indian-stock-market-mcp
MCP-first server for Indian equity research with local CSV/ Parquet data, price history, ticker validation, weekly performance, and Nifty 50 rankings.
instantclips-mcp
InstantStudioAI/instantclips-mcp
Turn an e-commerce product into short-form vertical video with Claude, Codex, Cursor, or any MCP client.
japan-anime-figure-mcp
atushi1841/japan-anime-figure-mcp
Read-only MCP server exposing Japanese anime figure price comparison data from MyFigureList and other sources. Three tools: current price, price history, and lowest price search.
japan-fuel-price-mcp
atushi1841/japan-fuel-price-mcp
MCP server: Japan weekly gasoline/diesel/kerosene retail prices from METI Agency for Natural Resources and Energy official XLSX (47 prefectures + nationwide, since 1990)
japan-minimum-wage-mcp
atushi1841/japan-minimum-wage-mcp
MCP server for Japan regional minimum wages (47 prefectures, MHLW official stats: hourly rates, effective dates, 24-year history)
jperelli-graylog
jperelli/graylog-mcp
An MCP server to integrate ai agents with for Graylog to help debug any issue. It uses best practices to give the agent an advanced custom use of graylog, not just a clone of the http api access.
kensho-sweep-mcp
atushi1841/kensho-sweep-mcp
Read-only Japan X/Twitter sweepstakes campaign data from kensho collection (1133 observations). Three tools: current sweep, sweep history, and top prize movers. No account, no API
kit-campus-mcp
OutBlade/kit-campus-mcp
MCP server for the KIT Campus portal: exam results, registrations, study progress, timetables, and module catalogues.
kmp-api-lookup-mcp
Heymonth/kmp-api-lookup-mcp
Index Kotlin/Native iOS klib APIs with this MCP server for fast symbol lookup and local database management.
lambda-data-pipeline-mcp
SEOSiri-Official/lambda-data-pipeline-mcp
A sovereign, high-speed, local-first Big Data Ingestion, Filtering, and Analytical Pipeline Orchestrator over the Model Context Protocol.
lifeflow-remote-mcp
yashsham/lifeflow-remote-mcp
Standalone cloud-deployable Remote Model Context Protocol (MCP) servers built with FastMCP (SSE/HTTP transport) providing global intelligence: real-time forex currency conversion, cryptocurrency valuations, live weather telemetry, and city living cost indicators.
linkedin-osint-cli
gnmike57/linkedin-osint-cli
LinkedIn CLI + MCP server: 43 platform commands plus a 13-command OSINT suite (company discovery, employee scraping, username generation, role classification, org charts). Interactive console, cookie-session auth, AI-agent native.
longshore
chaytanc/longshore
The Reality Next Door — an open, cited worldbuilding commons: a post-extraction Seattle on the Salish Sea. Authored by LONGSHORE, an AI, in the open. Agents & humans welcome: start at AGENTS.md
matematicsolutions-pk-eli
matematicsolutions/pk-eli-mcp
MCP server for Pakistani law: search and cite 967 federal statutes and 1,414 Supreme Court judgments, full text, with a strict citation contract.
mbox-mcp
arose26/mbox-mcp
Search local email archives (.mbox/.eml) entirely on your machine. No OAuth, no cloud.
mcp-ashby
smeet666/mcp-ashby
MCP server for public Ashby job boards. Resolve a company to its board, search its openings and the pay it publishes. No API key.
mcp-books
smeet666/mcp-books
MCP server that searches inside several archives at once, browses their catalogues and reads records. No API key.
mcp-clickhousex
alyiox/mcp-clickhousex
Read-only MCP server for ClickHouse: SELECT queries, EXPLAIN plan/pipeline/syntax analysis, and a snapshot mode that spills large results to a CSV resource. Read-only is enforced by the engine — every client carries readonly=1, so writes, external table functions and query-level SETTINGS are refused
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?