MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/41
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
961–984 of 1,620 · ranked by trust score, then stars
Modular
d-kimuson/modular-mcp
A Model Context Protocol (MCP) proxy server that enables efficient management of large tool collections across multiple MCP servers by grouping them and loading tool schemas on-demand.
Flight Ticket
xiaonieli7/flightticketmcp
Flight Ticket MCP Server 实现了供航空机票相关查询操作的工具和资源。它作为AI助手与航空服务系统之间的桥梁,专注于航班实时动态查询功能。
OSINT Tools
himanshusanecha/mcp-osint-server
PJE
chapirousia/pje-mcp-server
AI Mate
symfony/ai-mate
AI development assistant CLI for Symfony projects
Whoop
ctvidic/whoop-mcp-server
Metatron
kerbelp/metatron
Git-native context layer for AI coding agents. Your team's real engineering decisions — patterns, pitfalls, conventions — live as reviewed markdown files in your repo; agents consult them before writing code and record what they learn. Files-first, no server required; MCP as an optional serving laye
JigsawStack
jigsawstack/jigsawstack-mcp-server
Model Context Protocol Server that allows AI models to interact with JigsawStack models!
BiznagaFest Demos
0gis0/biznagafest-mcp
MCP Servers en Málaga con salero
mcp-tenant-isolation
subodhkc/mcp-tenant-isolation
Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.
rag-vault
RobThePCGuy/rag-vault
One command. Zero cloud. Your docs stay private.
telugu-calendar-utilities
socraticsurge/telugu-calendar-utilities
Telugu Panchangam as calendar feeds — tithi, nakshatra, muhurtams, Ekadashi and 30+ festivals for 22 cities, in Drik Ganita, Surya Siddhanta and Vakya systems. Plus an MCP server for AI assistants.
WebExtratorMCP
AceDataCloud/WebExtratorMCP
MCP server for web extraction and rendering via Ace Data Cloud.
Fli
punitarani/fli
Google Flights MCP, CLI and Python Library
Local REST API
coddingtonbear/obsidian-local-rest-api
A secure REST API and Model Context Protocol (MCP) server for your vault.
Shrimp Task Manager
cjo4m06/mcp-shrimp-task-manager
Shrimp Task Manager is a task tool built for AI Agents, emphasizing chain-of-thought, reflection, and style consistency. It converts natural language into structured dev tasks with dependency tracking and iterative refinement, enabling agent-like developer behavior in reasoning AI systems.
Context Space
context-space/context-space
Ultimate Context Engineering Infrastructure, starting from MCPs and Integrations
Vercel Adapter
vercel/mcp-adapter
Easily spin up an MCP Server on Next.js, Nuxt, Svelte, and more
Nano Banana
zhongweili/nanobanana-mcp-server
AI image generation MCP server powered by Google Gemini, with smart model selection and 4K output
ServiceNow
echelon-ai-labs/servicenow-mcp
MCP Server for ServiceNow
ServiceNow
osomai/servicenow-mcp
MCP Server for ServiceNow
Uteke
codecoradev/uteke
🧠 The Brain for Your AI — Local-first memory engine for AI agents. Store, recall, and search memories with semantic embeddings. Single Rust binary, zero config, fully offline.
SAP Documentation
marianfoo/mcp-sap-docs
Fast MCP server for unified SAP docs search (SAPUI5, CAP, OpenUI5, wdi5) with BM25 full-text search
Oh My Cassette
cassette-editor/oh-my-cassette
你的随身 AI 剪辑搭档 | Pocket AI co-editor for video montage — AI video editing plugin & MCP server for Claude Code, Codex, Hermes & OpenCode
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?