MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/43

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

1,009–1,032 of 1,620 · ranked by trust score, then stars

SearXNG

ihor-sokoliuk/mcp-searxng

✓SAFE B

Private web search for AI assistants via SearXNG — supports Claude, Cursor, and any MCP client

★ 1,2604 readstdio

Finance Data Server

guangxiangdebizi/financemcp

!CAUTION B

这是一个金融领域相关的mcp,本项目通过集成 Tushare API 和 Binance API 为语言模型(如Claude)提供全面的实时金融数据访问能力,支持股票、基金、债券、宏观经济指标、稳定币、虚拟货币等多维度金融数据分析。其中也包含了金融数据查询、财经新闻查询、国家统计局数据查询等

★ 86018 readstreamable-http

mcp-handler

vercel/mcp-handler

✓SAFE B

Easily spin up an MCP Server on Next.js, Nuxt, Svelte, and more

★ 6844 readstreamable-http

mcp-handler

vercel-labs/mcp-handler

✓SAFE B

Easily spin up an MCP Server on Next.js, Nuxt, Svelte, and more

★ 6834 readstreamable-http

Pullmd

aeternalabshq/pullmd

✓SAFE B

Self-hosted URL- and file-to-Markdown service for humans and AI agents - web pages, documents, images, audio, YouTube. PWA + REST + MCP + Claude Code skill, Reddit-aware, refreshable share links.

★ 4853 readstreamable-http

Claude Gemini

cmdaltctr/claude-gemini-mcp-slim

✓SAFE B

Lightweight MCP integration bringing Google's Gemini AI capabilities to Claude Code with 1M+ token context window, smart model selection, and powerful code analysis tools

★ 2333 readstdio

Chat Application

machaojin1917939763/mcp-ui

!CAUTION B

基于MCP(Model Context Protocol)的智能聊天应用,支持Web和桌面环境。集成OpenAI/Anthropic API,提供MCP服务器的所有工具能力。简洁现代的UI设计,支持跨平台部署。

★ 892 read

SmartDB

wenb1n-dev/smartdb_mcp

!CAUTION B

Universal database MCP server connecting to MySQL, PostgreSQL, SQL Server, MariaDB,DM8,Oracle,not only provides basic database connection such as OAuth 2.0 authentication , health checks, SQL optimization, and index health detection

★ 7718 readstdio

Suno

acedatacloud/sunomcp

!CAUTION B

MCP server for Suno AI music generation, lyrics, and cover workflows via Ace Data Cloud.

★ 6410 readstdio

Bank

elcukro/bank-mcp

!CAUTION B

Give your AI assistant secure, read-only access to your bank accounts. MCP server supporting Plaid, Teller, Enable Banking, and Tink.

★ 505 readstdio

Withings

akutishevsky/withings-mcp

!CAUTION B

MCP server for Withings health data integration

★ 4314 readstreamable-http

Pdf2Md

futureunreal/mcp-pdf2md

!CAUTION B

PDF to Markdown conversion tool

★ 342 read

macOS UI Automation

mb-dev/macos-ui-automation-mcp

✓SAFE B
★ 338 readsse

Professional SEO Checker

hostinger/selfhosted-mcp-server-template

✓SAFE B
★ 293 readstreamable-http

UML Diagram Generator

swayingleaves/uml-mcp-server

✓SAFE B
★ 2710 readsse

Moldavite

mauropereiira/Moldavite

!CAUTION B

Your thoughts, forged from cosmic impact. A local-first, privacy-first Markdown notes app with a built-in MCP server, for macOS and Windows.

★ 131 read

@mcp-abap-adt/adt-clients

fr0ster/mcp-abap-adt-clients

!CAUTION B

ADT clients for SAP ABAP systems - Read-only, CRUD, and Management operations

★ 611 read

mcp-from-openapi

agentfront/mcp-from-openapi

✓SAFE B

Production-ready TypeScript library for converting OpenAPI specifications into MCP (Model Context Protocol) tool

★ 412 read

better-chat

Chris31372/better-chat

!CAUTION B

🤖 Build an AI chat app with multi-model support, secure user data isolation, and advanced features like model integration and persistent conversation management.

★ 33 readstreamable-http

NotDory

jchristn/NotDory

✓SAFE B

NotDory is durable memory your agents manage themselves — so every session starts where the last left off.

★ 24 readstreamable-http

FishMCP

AceDataCloud/FishMCP

!CAUTION B

Fish Audio MCP server — text-to-speech with Fish Audio voice models. Powered by AceDataCloud.

★ 14 readstdio

HiveMem

visterion/HiveMem

✓SAFE B

Personal knowledge system — MCP server with PostgreSQL semantic search and temporal knowledge graph

★ 11 read

mcp-whoop

AlixAkhribi/mcp-whoop

!CAUTION B

Read-only Model Context Protocol server for WHOOP, over stdio. Browser OAuth login with automatic token refresh, and scope-gated tools across WHOOP's v2 API: cycles, sleep, recovery, workouts, profile and body measurements, plus summaries that digest the last N days into one answer.

★ 014 read

ghidra-mcp

bethington/ghidra-mcp

!CAUTION B

Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.

★ 4,8993 readstdio

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.