MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/42
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
985–1,008 of 1,620 · ranked by trust score, then stars
Twilio
twilio-labs/mcp
Monorepo providing 1) OpenAPI to MCP Tool generator 2) Exposing all of Twilio's API as MCP Tools
InfraNodus
infranodus/mcp-server-infranodus
The official InfraNodus MCP server
Video Analyzer
guimatheus92/mcp-video-analyzer
MCP server that turns any video — YouTube, Instagram, TikTok, Loom, X, Vimeo, direct URLs, local files — into transcripts, key frames, OCR text, and metadata for AI agents.
Xiaohongshu
todieornot/xiaohongshu-mcp-nodejs
企业级小红书MCP Node.js重构 - 支持多账号矩阵管理、反风控、数据采集与发布
SunoMCP
AceDataCloud/SunoMCP
MCP server for Suno AI music generation, lyrics, and cover workflows via Ace Data Cloud.
CAP Plugin
gavdilabs/cap-mcp-plugin
MCP (Model Context Protocol) server plugin for CAP NodeJS
Dremio
dremio/dremio-mcp
Dremio MCP server
Dev.to MCP Server
nickytonline/dev-to-mcp
A remote Model Context Protocol (MCP) server for interacting with the dev.to public API without requiring authentication.
CDK Pywrapper
sebotic/cdk_pywrapper
A Python wrapper for the Chemistry Development Kit (CDK)
Google Researcher
zoharbabin/google-researcher-mcp
⚠️ DEPRECATED — Use https://github.com/zoharbabin/web-researcher-mcp instead
fastify-mcp-server
flaviodelgrosso/fastify-mcp-server
Wire MCP protocol in your Fastify applications with ease
Unified Tool Graph
pratikjadhav2726/unified-mcp-tool-graph
Instead of dumping 1000+ tools into a model’s prompt and expecting it to choose wisely, the Unified MCP Tool Graph equips your LLM with structure, clarity, and relevance. It fixes tool confusion, prevents infinite loops, and enables modular, intelligent agent workflows.
Human
olalonde/mcp-human
Human Assistance for AI Assistants
BrowserLoop
mattiasw/browserloop
A Model Context Protocol (MCP) server for taking screenshots and reading console logs of web pages using Playwright.
@amplitude/mcp-analytics
amplitude/Amplitude-MCP-Analytics-Node
Amplitude MCP Analytics SDK - MCP tracking for Amplitude Analytics. :sparkles: :calendar: Book a session with us :arrow_down:
agentwheel
NestDevLab/agentwheel
Skills, rules, and instructions across every AI agent. One source, every agent.
vitest-agent
spencerbeggs/vitest-agent
A Vitest reporter that keeps results of test runs focused for LLMs
Achiote
KyaniteLabs/Achiote
Achiote — nostalgic food-memory reconstruction MCP server: recreates childhood dishes using ingredients available where you are
ai_agents_api_library
eater2/ai_agents_api_library
Verified catalog of 300+ APIs and MCP servers that AI agents can call after a one-time API key/OAuth setup. JSON, llms.txt and an MCP server for agents.
browden
nishantsny/browden
Read-only browser MCP server — a local, configurable MCP shell around real Chrome for LLM agents.
mcp-broker
korals-ai/mcp-broker
An MCP gateway for tool servers that aren't up yet — upstreams appear mid-session instead of blocking agent startup
StoreTalk-MCP-Tiendanube
Javi-cba/StoreTalk-MCP-Tiendanube
PROYECTO EN DESARROLLO: Gestioná tu tienda online conversando con tu asistente de IA. Creá, editá o borrá productos, actualizá precios y stock, revisá pedidos, consultá ventas y creá cupones en lenguaje natural, sin entrar al panel. Conectás tu tienda una vez y listo.
Nocturne Memory
dataojitori/nocturne_memory
A lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. Say goodbye to Vector RAG and amnesia. Empower your AI with persistent, graph-like structured memory across any model, session, or tool. Drop-in replacement for OpenClaw.
mcp-searxng
ihor-sokoliuk/mcp-searxng
Private web search for AI assistants via SearXNG — supports Claude, Cursor, and any MCP client
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?