MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/44
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,033–1,056 of 1,620 · ranked by trust score, then stars
Pg Aiguide
timescale/pg-aiguide
MCP server and Claude plugin for Postgres skills and documentation. Helps AI coding tools generate better PostgreSQL code.
LycheeMem
lycheemem/lycheemem
Lightweight Long-Term Memory for LLM Agents.
Opik
comet-ml/opik-mcp
Model Context Protocol (MCP) server for Opik, the open-source LLM observability and evaluation platform, built by Comet. Read traces, log scores, and manage prompts from Claude Code, Cursor, or VS Code.
opik-mcp
comet-ml/opik-mcp
Model Context Protocol (MCP) server for Opik, the open-source LLM observability and evaluation platform, built by Comet. Read traces, log scores, and manage prompts from Claude Code, Cursor, or VS Code.
ZeroSlop
manavmishra/ZeroSlop
Open-source Agent Skill that finds and removes AI slop from your writing
Next
vertile-ai/next-mcp-server
Help LLMs to understand your Next apps better
Next.js Router Analyzer
jazelly/next-mcp-server
Help LLMs to understand your Next apps better
Mindpilot
abrinsmead/mindpilot-mcp
See through your agent's eyes. Visualize legacy code, architect new systems, understand everything.
Multi-AI Advisor
yuchenssr/multi-ai-advisor-mcp
council of models for decision
SO-ARM100 Robot Control
ilialarchenko/robot_mcp
A simple MCP server for the SO-ARM100 control
SAP Note Search
marianfoo/mcp-sap-notes
MCP Server to search and retrieve SAP Notes
TomTom
tomtom-international/tomtom-mcp
A Model Context Protocol (MCP) server providing TomTom's location services, search, routing, and traffic data to AI agents.
Uptime Kuma
davidfuchs/mcp-uptime-kuma
A Model Context Protocol (MCP) server for Uptime Kuma version 2.
One MCP
particlefuture/1mcpserver
TrueNAS Core
vespo92/truenascoremcp
A working TrueNAS Core MCP Server
Chrome Google Search
cmann50/mcp-chrome-google-search
gitea-mcp-server
pxsloot/gitea-mcp-server
Gitea MCP Server – A Model Context Protocol implementation for Gitea. Provides tools and resources for AI agents to interact with Gitea repositories, issues, pull requests, and more, much more. Built with FastMCP for seamless Gitea integration.
ProdKit
denisbilli/prodkit
agentic_services
impanyu/agentic_services
Paid claim verification with cited web evidence, source provenance, snapshots, and hashes.
mailsift
itswl/mailsift
Read-only multi-mailbox triage: watch inboxes and spam, judge what actually matters with an LLM, and push only that to Feishu or a webhook. MCP server and a web view included.
popcorn-temporal-anchor
violetclaire/popcorn-temporal-anchor
Signed temporal evidence for agents: trusted timestamp and proof-of-existence verification, authorization expiry, and an RFC 3161 / OpenTimestamps comparison. Free offline verifier; evidence, not authorization or proof of execution.
BrowserTools MCP
AgentDeskAI/browser-tools-mcp
Monitor browser logs directly from Cursor and other MCP compatible IDEs.
BrowserTools
agentdeskai/browser-tools-mcp
Monitor browser logs directly from Cursor and other MCP compatible IDEs.
Interactive Feedback
minidoracat/mcp-feedback-enhanced
Enhanced MCP server for interactive user feedback and command execution in AI-assisted development, featuring dual interface support (Web UI and Desktop Application) with intelligent environment detection and cross-platform compatibility.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?