MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/40

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

937–960 of 1,620 · ranked by trust score, then stars

seosiri-api-guard-mcp-server

SEOSiri-Official/seosiri-api-guard-mcp-server

✓SAFE B

A sovereign, universal API validation and multi-industry compliance security MCP server supporting OWASP, HIPAA, PCI-DSS, GDPR, and SEO/AEO metadata guardrails.

★ 01 readsse

serpjet

jibaoproxyofficial-pixel/serpjet-mcp

✓SAFE B

MCP server for SERPJET - Google Search API for AI agents. 1,000 free searches/month, no card.

★ 01 readstdio

shade-mcp

noisefactorllc/shade-mcp

✓SAFE B

MCP dev tools for Noisemaker and Portable shader effects

★ 019 readstdio

shigechika-boxadm

shigechika/boxadm-mcp

✓SAFE B

MCP server for Box admin-log analytics — external-sharing visibility, read-only

★ 09 readstdio

sidewise

nulljosh/sidewise

!CAUTION B

Reads 16 feeds across the political spectrum and flags stories only one side is covering.

★ 04 readstreamable-http

star-meet

edestory/mcp-starmeet

✓SAFE B

MCP server for Vedic astrology (Jyotish) — Kundali birth-chart preview, daily Panchang & Nakshatra tools for Claude/Cursor/AI assistants. Powered by star-meet.com

★ 02 readstdio

stelardigital-signals

StelarDigital/stelar-signals-mcp

!CAUTION B

MCP server for Stelar Digital crypto signal + AI utility APIs (RapidAPI-backed)

★ 012 readstdio

tax-law-mcp

xqzimgz/tax-law-mcp

✓SAFE B

Provide access to Japanese tax laws, official notices, and rulings with accurate source data from e-Gov API and tax authority websites.

★ 07 readstdio

tickerscout-mcp

tickerscout/tickerscout-mcp

✓SAFE B

MCP server for Ticker Scout: free, no-key SEC filing fundamentals for AI agents

★ 036 readstreamable-http

tools-that-dont-upload

etacbae6768-a11y/tools-that-dont-upload

✓SAFE B

MCP server and REST API for data, text, code, PDF and web tasks, plus browser tools that don't upload your files. Requests are not stored.

★ 03 readstreamable-http

toolstop

toolstop/toolstop

✓SAFE B

Small, stateless MCP servers served from toolstop.dev

★ 010 readstdio

unchore-defend

smilemino/unchore-defend

✓SAFE B

Security help for defenders: grade your site's security headers (fixes + README badge) and read logs/code to find what happened. Claude Code plugin, MCP server, no install.

★ 02 readstdio

warppay402-server

Warppay402/warppay402-server

!CAUTION B

Instant x402 V2 monetization SDK for MCP tools, Hono APIs, Cloudflare Gateway, and Base.

★ 02 read

workatastartup-mcp

MIt9/workatastartup-mcp

✓SAFE B

MCP server for WorkAtAStartup — search startup job listings via Claude or Cursor

★ 04 read

yachtsy-mcp-server

manee1112/yachtsy-mcp-server

✓SAFE B

🚤 Access AI-driven yacht marketplace insights with Yachtsy MCP Server. Explore 25,000+ listings and get expert sailing advice effortlessly.

★ 01 read

youtube-transcript-apify

nokia2k2/youtube-transcript-apify

✓SAFE B

YouTube transcripts that keep working on AWS, GCP, Vercel and other cloud servers. Python client, CLI and MCP server.

★ 02 readstdio

Douyin

yzfly/douyin-mcp-server

!CAUTION B

提取抖音无水印视频链接,视频文案,douyin-mcp-server,mcp,claude skill,支持龙虾

★ 1,2735 read

Web Eval Agent

refreshdotdev/web-eval-agent

!CAUTION B

An MCP server that autonomously evaluates web applications.

★ 1,2352 readstdio

Web Eval Agent

withrefresh/web-eval-agent

!CAUTION B

An MCP server that autonomously evaluates web applications.

★ 1,2352 readstdio

WebEvalAgent

operative-sh/web-eval-agent

!CAUTION B

An MCP server that autonomously evaluates web applications.

★ 1,2352 readstdio

CircleCI

circleci-public/mcp-server-circleci

!CAUTION B

[DEPRECATED] This package is no longer maintained. Migrate to CircleCI's hosted MCP server or the CircleCI CLI MCP. See https://circleci.com/docs/guides/toolkit/circleci-mcp-overview/

★ 931 readsse

Dockmaster

dcspark/mcp-dockmaster

!CAUTION B

MCP Dockmaster allows you to easily install and manage MCP servers. Available for Mac, Windows and Linux as a Desktop App, CLI and a library.

★ 893 readstdio

Multi-CLI

osanoai/multicli

✓SAFE B

Gemini, Codex, Claude, and OpenCode all in a single MCP tool for use by any coding agent.

★ 7516 readstdio

Prefect

prefecthq/prefect-mcp-server

!CAUTION B

Prefect MCP server

★ 541 readstdio

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.