MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/37

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

865–888 of 1,620 · ranked by trust score, then stars

fasuizu-br-brainiall-tts

fasuizu-br/brainiall-tts-mcp

✓SAFE B

Hosted pay-per-use text-to-speech MCP server — 54 neural voices, 9 languages incl. Brazilian Portuguese. $0.008/1K chars, $10 free credits.

★ 02 readstreamable-http

flowchart-mcp-server

Lawsonseminiferous124/flowchart-mcp-server

✓SAFE B

Generate academic quality flowcharts from text or code through this local MCP server that renders SVG graphs using Graphviz.

★ 02 read

goaimoat-ai-visibility-cn-mcp

jayniebingyu-cyber/goaimoat-ai-visibility-cn-mcp

!CAUTION B

AI visibility audit MCP

★ 03 readstreamable-http

goaimoat-web-scrape-mcp

jayniebingyu-cyber/goaimoat-web-scrape-mcp

✓SAFE B

URL to clean Markdown for AI agents. 2 tools: scrape_url (one page) and crawl_website (whole site). Blocked or paywalled pages are reported honestly, never invented. Hosted endpoint at scrape.mcp.goaimoat.com/mcp, free 3 calls per email, no card. A cheaper Firecrawl alternative; also runs locally vi

★ 02 readstreamable-http

hedging8563-tokenlab

hedging8563/tokenlab-mcp-server

✓SAFE B

OpenAPI-generated MCP server for TokenLab model discovery, pricing, chat, native System One decisions, media, files, embeddings, webhooks and async tasks.

★ 02 readstdio

ilinxa-capture

yuniirhm/ilinxa-capture

✓SAFE B

Extract video frames and compose AI-readable grid sheets for multimodal LLM pipelines, self-hosted via REST, Web UI, or MCP.

★ 08 readstdio

indian-stock-market-mcp

ratan-systems/indian-stock-market-mcp

✓SAFE B

MCP-first server for Indian equity research with local CSV/ Parquet data, price history, ticker validation, weekly performance, and Nifty 50 rankings.

★ 07 readstdio

instantclips-mcp

InstantStudioAI/instantclips-mcp

✓SAFE B

Turn an e-commerce product into short-form vertical video with Claude, Codex, Cursor, or any MCP client.

★ 02 readstdio

japan-anime-figure-mcp

atushi1841/japan-anime-figure-mcp

✓SAFE B

Read-only MCP server exposing Japanese anime figure price comparison data from MyFigureList and other sources. Three tools: current price, price history, and lowest price search.

★ 03 readstdio

japan-fuel-price-mcp

atushi1841/japan-fuel-price-mcp

✓SAFE B

MCP server: Japan weekly gasoline/diesel/kerosene retail prices from METI Agency for Natural Resources and Energy official XLSX (47 prefectures + nationwide, since 1990)

★ 05 readstdio

japan-minimum-wage-mcp

atushi1841/japan-minimum-wage-mcp

✓SAFE B

MCP server for Japan regional minimum wages (47 prefectures, MHLW official stats: hourly rates, effective dates, 24-year history)

★ 04 readstdio

jperelli-graylog

jperelli/graylog-mcp

✓SAFE B

An MCP server to integrate ai agents with for Graylog to help debug any issue. It uses best practices to give the agent an advanced custom use of graylog, not just a clone of the http api access.

★ 05 readstdio

kensho-sweep-mcp

atushi1841/kensho-sweep-mcp

!CAUTION B

Read-only Japan X/Twitter sweepstakes campaign data from kensho collection (1133 observations). Three tools: current sweep, sweep history, and top prize movers. No account, no API

★ 03 readstdio

kit-campus-mcp

OutBlade/kit-campus-mcp

✓SAFE B

MCP server for the KIT Campus portal: exam results, registrations, study progress, timetables, and module catalogues.

★ 011 read

kmp-api-lookup-mcp

Heymonth/kmp-api-lookup-mcp

✓SAFE B

Index Kotlin/Native iOS klib APIs with this MCP server for fast symbol lookup and local database management.

★ 03 readstdio

lambda-data-pipeline-mcp

SEOSiri-Official/lambda-data-pipeline-mcp

✓SAFE B

A sovereign, high-speed, local-first Big Data Ingestion, Filtering, and Analytical Pipeline Orchestrator over the Model Context Protocol.

★ 07 readstdio

lifeflow-remote-mcp

yashsham/lifeflow-remote-mcp

✓SAFE B

Standalone cloud-deployable Remote Model Context Protocol (MCP) servers built with FastMCP (SSE/HTTP transport) providing global intelligence: real-time forex currency conversion, cryptocurrency valuations, live weather telemetry, and city living cost indicators.

★ 04 readsse

linkedin-osint-cli

gnmike57/linkedin-osint-cli

!CAUTION B

LinkedIn CLI + MCP server: 43 platform commands plus a 13-command OSINT suite (company discovery, employee scraping, username generation, role classification, org charts). Interactive console, cookie-session auth, AI-agent native.

★ 01 readstdio

longshore

chaytanc/longshore

✓SAFE B

The Reality Next Door — an open, cited worldbuilding commons: a post-extraction Seattle on the Salish Sea. Authored by LONGSHORE, an AI, in the open. Agents & humans welcome: start at AGENTS.md

★ 013 readstdio

matematicsolutions-pk-eli

matematicsolutions/pk-eli-mcp

✓SAFE B

MCP server for Pakistani law: search and cite 967 federal statutes and 1,414 Supreme Court judgments, full text, with a strict citation contract.

★ 05 readstdio

mbox-mcp

arose26/mbox-mcp

✓SAFE B

Search local email archives (.mbox/.eml) entirely on your machine. No OAuth, no cloud.

★ 03 readstdio

mcp-ashby

smeet666/mcp-ashby

✓SAFE B

MCP server for public Ashby job boards. Resolve a company to its board, search its openings and the pay it publishes. No API key.

★ 05 readstdio

mcp-books

smeet666/mcp-books

✓SAFE B

MCP server that searches inside several archives at once, browses their catalogues and reads records. No API key.

★ 03 readstdio

mcp-clickhousex

alyiox/mcp-clickhousex

✓SAFE B

Read-only MCP server for ClickHouse: SELECT queries, EXPLAIN plan/pipeline/syntax analysis, and a snapshot mode that spills large results to a CSV resource. Read-only is enforced by the engine — every client carries readonly=1, so writes, external table functions and query-level SETTINGS are refused

★ 01 readstdio

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.