MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/43
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,009–1,032 of 1,620 · ranked by trust score, then stars
SearXNG
ihor-sokoliuk/mcp-searxng
Private web search for AI assistants via SearXNG — supports Claude, Cursor, and any MCP client
Finance Data Server
guangxiangdebizi/financemcp
这是一个金融领域相关的mcp,本项目通过集成 Tushare API 和 Binance API 为语言模型(如Claude)提供全面的实时金融数据访问能力,支持股票、基金、债券、宏观经济指标、稳定币、虚拟货币等多维度金融数据分析。其中也包含了金融数据查询、财经新闻查询、国家统计局数据查询等
mcp-handler
vercel/mcp-handler
Easily spin up an MCP Server on Next.js, Nuxt, Svelte, and more
mcp-handler
vercel-labs/mcp-handler
Easily spin up an MCP Server on Next.js, Nuxt, Svelte, and more
Pullmd
aeternalabshq/pullmd
Self-hosted URL- and file-to-Markdown service for humans and AI agents - web pages, documents, images, audio, YouTube. PWA + REST + MCP + Claude Code skill, Reddit-aware, refreshable share links.
Claude Gemini
cmdaltctr/claude-gemini-mcp-slim
Lightweight MCP integration bringing Google's Gemini AI capabilities to Claude Code with 1M+ token context window, smart model selection, and powerful code analysis tools
Chat Application
machaojin1917939763/mcp-ui
基于MCP(Model Context Protocol)的智能聊天应用,支持Web和桌面环境。集成OpenAI/Anthropic API,提供MCP服务器的所有工具能力。简洁现代的UI设计,支持跨平台部署。
SmartDB
wenb1n-dev/smartdb_mcp
Universal database MCP server connecting to MySQL, PostgreSQL, SQL Server, MariaDB,DM8,Oracle,not only provides basic database connection such as OAuth 2.0 authentication , health checks, SQL optimization, and index health detection
Suno
acedatacloud/sunomcp
MCP server for Suno AI music generation, lyrics, and cover workflows via Ace Data Cloud.
Bank
elcukro/bank-mcp
Give your AI assistant secure, read-only access to your bank accounts. MCP server supporting Plaid, Teller, Enable Banking, and Tink.
Withings
akutishevsky/withings-mcp
MCP server for Withings health data integration
Pdf2Md
futureunreal/mcp-pdf2md
PDF to Markdown conversion tool
macOS UI Automation
mb-dev/macos-ui-automation-mcp
Professional SEO Checker
hostinger/selfhosted-mcp-server-template
UML Diagram Generator
swayingleaves/uml-mcp-server
Moldavite
mauropereiira/Moldavite
Your thoughts, forged from cosmic impact. A local-first, privacy-first Markdown notes app with a built-in MCP server, for macOS and Windows.
@mcp-abap-adt/adt-clients
fr0ster/mcp-abap-adt-clients
ADT clients for SAP ABAP systems - Read-only, CRUD, and Management operations
mcp-from-openapi
agentfront/mcp-from-openapi
Production-ready TypeScript library for converting OpenAPI specifications into MCP (Model Context Protocol) tool
better-chat
Chris31372/better-chat
🤖 Build an AI chat app with multi-model support, secure user data isolation, and advanced features like model integration and persistent conversation management.
NotDory
jchristn/NotDory
NotDory is durable memory your agents manage themselves — so every session starts where the last left off.
FishMCP
AceDataCloud/FishMCP
Fish Audio MCP server — text-to-speech with Fish Audio voice models. Powered by AceDataCloud.
HiveMem
visterion/HiveMem
Personal knowledge system — MCP server with PostgreSQL semantic search and temporal knowledge graph
mcp-whoop
AlixAkhribi/mcp-whoop
Read-only Model Context Protocol server for WHOOP, over stdio. Browser OAuth login with automatic token refresh, and scope-gated tools across WHOOP's v2 API: cycles, sleep, recovery, workouts, profile and body measurements, plus summaries that digest the last N days into one answer.
ghidra-mcp
bethington/ghidra-mcp
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?