MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/4
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
73–96 of 1,620 · ranked by trust score, then stars
Bazi
cantian-ai/bazi-mcp
MCP server for Bazi (八字) information
DroidMind
hyperb1iss/droidmind
Control your Android devices with AI using Model Context Protocol
Alchemy
runekaagaard/mcp-alchemy
A MCP (model context protocol) server that gives the LLM access to and knowledge about relational databases like SQLite, Postgresql, MySQL & MariaDB, Oracle, and MS-SQL.
Anthropic Tools
anthropics/anthropic-tools
F2C
f2c-ai/f2c-mcp
F2C MCP Server
Google Scholar
jackkuo666/google-scholar-mcp-server
A MCP Server for Google Scholar: 🔍 Enable AI assistants to search and access Google Scholar papers through a simple MCP interface.
GraphQL
blurrah/mcp-graphql
Model Context Protocol server for GraphQL
Teams Integration
inditextech/mcp-teams-server
An MCP (Model Context Protocol) server implementation for Microsoft Teams integration, providing capabilities to read messages, create messages, reply to messages, mention members.
Skillz
intellectronica/skillz
An MCP server for loading skills (shim for non-claude clients).
Ableton Live
simon-kansara/ableton-live-mcp-server
MCP Server implementation for Ableton Live OSC control
Computer Use
domdomegg/computer-use-mcp
💻 Give AI models complete control of your computer (probably a bad idea)
Run Model Context Protocol (MCP) servers with AWS Lambda
awslabs/run-model-context-protocol-servers-with-aws-lambda
Run existing Model Context Protocol (MCP) stdio-based servers in AWS Lambda functions
BloodHound AI
mordavid/bloodhound-mcp-ai
BloodHound-MCP-AI is integration that connects BloodHound with AI through Model Context Protocol, allowing security professionals to analyze Active Directory attack paths using natural language instead of complex Cypher queries.
Erick Wendel Contributions
erickwendel/erickwendel-contributions-mcp
A Model Context Protocol (MCP) server that provides tools to query Erick Wendel's contributions across different platforms
Acemcp
yeuxuan/ace-mcp-node
Acemcp 是一个高性能的 MCP (Model Context Protocol) 服务器,专为 AI 助手(如 Claude、GPT 等)提供代码库索引和语义搜索能力。通过 Acemcp,AI 助手可以: 🔍 快速搜索和理解大型代码库 📊 获取带行号的精确代码片段 🤖 自动增量更新索引 🌐 通过 Web 界面管理和调试
Omnisearch
spences10/mcp-omnisearch
🔍 A Model Context Protocol (MCP) server providing unified access to multiple search engines (Tavily, Brave, Kagi, Exa), AI tools (Kagi FastGPT, Exa, Linkup), and content extraction services (Firecrawl, Tavily, Kagi). Includes GitHub search. All through a single interface.
Codemogger
glommer/codemogger
Codemogger is a code indexing library and MCP server for AI coding agents
Code Execution Mode
elusznik/mcp-server-code-execution-mode
An MCP server that executes Python code in isolated rootless containers with optional MCP server proxying. Implementation of Anthropic's and Cloudflare's ideas for reducing MCP tool definitions context bloat.
CSS
stolinski/css-mcp
ImageSorcery
sunriseapps/imagesorcery-mcp
An MCP server providing tools for image processing operations
Deep Research
ozamatash/deep-research-mcp
Git Ingest
adhikasp/mcp-git-ingest
A Model Context Protocol (MCP) server that helps read GitHub repository structure and important files.
Facebook Ads Library
talknerdytome-labs/facebook-ads-library-mcp
MCP Server for Facebook ADs Library - Get instant answers from FB's ad library
Facebook Ads Library
trypeggy/facebook-ads-library-mcp
MCP Server for Facebook ADs Library - Get instant answers from FB's ad library
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?