MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/39
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
913–936 of 1,620 · ranked by trust score, then stars
mcp-openei-urdb
pipeworx-io/mcp-openei-urdb
OpenEI Utility Rate Database (URDB) MCP
mcp-pjm
pipeworx-io/mcp-pjm
Real-time electricity market data from PJM Interconnection, the largest US grid operator (13 states plus Washington DC, about 65 million people): wholesale power prices by node, electricity generation by fuel type, and the seven-day demand forecast.
mcp-planetary-computer
pipeworx-io/mcp-planetary-computer
Earth-observation imagery catalogue from Microsoft's Planetary Computer — search its open satellite and environmental collections (Sentinel, Landsat, NAIP, Daymet, ERA5, biodiversity) by area and date and get item ids, footprints, dates and asset URLs.
mcp-ptitchef
smeet666/mcp-ptitchef
MCP server for Ptitchef. Browse the recipe category tree and read its recipes. No API key required.
mcp-supertoinette
smeet666/mcp-supertoinette
MCP server for Supertoinette. Read French recipes and rescale their quantities honestly. No API key.
mcp-thai-text
anthonychkwn/mcp-thai-text
MCP server giving AI agents correct Thai text handling: word segmentation, caption line wrapping, and tone-mark-safe rendering
mcp-zoom
pipeworx-io/mcp-zoom
Zoom MCP Pack
mibly-apple-health-mcp
littlenew117/mibly-apple-health-mcp
Connect Apple Health to any MCP-compatible AI agent — sleep, steps, heart rate, HRV, workouts and more, via the Mibly iPhone app.
millerchou-strava-bridge
millerchou/strava-mcp-bridge
Use Strava's official MCP from Codex and OpenCode without creating a developer app. Local macOS Keychain and privacy-first streams.
nara-catalog-mcp
ianderso/nara-catalog-mcp
MCP server for genealogical research in the US National Archives Catalog: search records, read OCR text and citizen transcriptions, browse the hierarchy, and download page images.
nightmarquee-mcp
ant-dev-lab/nightmarquee-mcp
Cinematic website prompts with live previews, inside your editor. MCP server for Claude Code, Claude Desktop and Cursor.
nofax
AKzar1el/nofax
Human-in-the-loop approvals and notifications for AI coding agents via CLI, MCP, Claude Code, Codex and Cloudflare Workers.
open-signals
Civops-Platform/open-signals
Public data signals with provenance and licence on every reading: source catalogue, fetchers, REST, MCP, GeoJSON layers
pazair
Kula-Labs/pazair
Where agents keep their word. A marketplace where AI agents buy from and sell to other AI agents (MCP, pay on delivery, signed receipts).
pullpush
kaduno-systems/pullpush-mcp
Connect any two APIs and keep them in sync — official MCP server for PullPush.ai. 45 tools: shadow-mode previews, canonical data models, diagnostics.
r3tr0eth-emap
r3tr0eth/emap-labs
emap/labs — infraestructura de inteligencia geográfica: datasets, evals y RAG geoespacial para Euskadi (ES/EU)
rererr-amenbo
rererr/amenbo
Skims the web without making waves — a Japanese-web-native MCP server for low-impact, token-efficient web collection
rutter
shinytoyrobots/rutter
A record of what your AI sessions decided — and the receipts behind it. An MCP memory-of-use server over markdown notes: append-only, content-hashed, no model inside.
search-governance-mcp
SEOSiri-Official/search-governance-mcp
An open-source, local-first Model Context Protocol (MCP) server for **AI Search Crawler Governance, Brand Safety Guardrails, Canonical Integrity, and IndexNow Notifications
seedance-prompts-mcp
hanshs474/seedance-prompts-mcp
MCP server: 150 AI video prompts that were each rendered into a real video with Seedance 2 — search, inspect, audit and compose. Zero dependencies.
selflabbs-security-intel
datakoot/security-intel-mcp
Vulnerability-intelligence MCP server for AI agents: CVE lookups (NVD) and dependency-manifest audits (OSV). Keyless.
semantic-entity-mcp
SEOSiri-Official/semantic-entity-mcp
An open-source, local-first Model Context Protocol (MCP) server for Named Entity Extraction, Wikidata Disambiguation, sameAs Schema Linking, and Knowledge Graph Triple Construction
seo-research-mcp
Farbod148/seo-research-mcp
🔍 Streamline your SEO research with free tools designed for AI-powered IDEs, enhancing analysis and compliance with third-party services.
seob5285-alt-x402-facilitator-proxy
seob5285-alt/x402-facilitator-proxy
"An open, multi-tenant HTTP 402 infrastructure gateway and Model Context Protocol (MCP) server daemon built for autonomous AI agents. Enables programmatic 1% platform-fee split settlements in USDC on Base L2 with plug-and-play templates for Express.js, LangChain (TS), and CrewAI (Python)."
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?