MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/45
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,057–1,080 of 1,620 · ranked by trust score, then stars
HotClip
xixihhhh/hotclip
免费开源的 AI 剪辑 / 直播切片工具:长视频、直播回放、播客一键切成爆款竖屏短视频,直发抖音/快手/B站/小红书/视频号——AI 找高光金句、弹幕热度进爆点判断、自动加字幕、横屏转竖屏,本地运行无水印不上传 | Free open-source Opus Clip alternative, 100% local: AI clips long videos & livestream VODs into viral 9:16 shorts for TikTok & YouTube Shorts. No credits, no watermark, no uploads. Win/macOS/L
WeLink
runzhliu/welink
🔍微信聊天数据分析的本地化AI-agent(Docker/Windows/MacOS) · AI分身 / 大模型分析 / 好友排行 / 词云 / 情感趋势 / 群聊画像
Repowire
prassanna-ravishankar/repowire
May the agents talk . Connect Claude Code, Opencode, Codex, Pi across projects, across machines and with your telegram
Wxflows
ibm/wxflows
Examples and tutorials for building AI applications with watsonx.ai Flows Engine
Cryo
z80dev/cryo-mcp
A Python package for accessing Cryo datasets via Claude Code
Ops
heht571/ops-mcp-server
服务器、网络设备巡检和运维MCP工具
Mocxykit
shunseven/mocxykit
This is an Frontend development service middleware that can be used with webpack and vite. Its main function is to visualize the configuration, manage http(s)-proxy, and mock data.
AI DirScan
elitewa/ai_dirscan
可用于AI进行自动目录扫描的MCP辅助工具
Hyades
apology-is-policy/hyades
Unicode/ASCII Mathematical Typesetting Engine with LaTeX Input, VSCode Integration, MCP server, and Automatic Rendering into Source Code Comments
CSS Noop Checker
purupurupu/css-noop-checker
Chrome DevTools extension that detects CSS properties with no effect
RTFM
roomi-fields/rtfm
The open retrieval layer for AI coding agents. Indexes code, docs, legal, research, data — 22 parsers (incl. EPUB, DOCX, ODT), FTS5 + semantic search, knowledge graph. Serves surgical context via MCP. Open source, local, free.
dsh-skills-anywhere
noteflowai/dsh-skills-anywhere
Check Agent Skills before reuse: find missing local resources in browser or CI, review pinned examples, and serve skills through DeepSeek Harness or MCP.
echelongraph-mcp
echelongraph/echelongraph-mcp
MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, version, SBOM and lockfile checks, vendor advisories, and per-CVE exposure from Shodan data (© Shodan). Free and keyless.
6F
Xxx91n/6F
Macro + micro engineering-content audit for git-healthy repositories — Claude Code Agent Plugin (Hub-of-Facts + federated adjudication, evidence gates, verifiable receipts). Preview: 3 of 5 capabilities live.
indexagentica-mcp
Drudley/indexagentica-mcp
Read-only remote MCP server (Streamable HTTP) and REST search for indexagentica.com
Ghidra
bethington/ghidra-mcp
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
Code Interpreter API
shroominic/codeinterpreter-api
👾 Open source implementation of the ChatGPT Code Interpreter
Azure DevOps
microsoft/azure-devops-mcp
The MCP server for Azure DevOps, bringing the power of Azure DevOps directly to your agents.
LLM Wiki
lucasastorian/llmwiki
Open Source Implementation of Karpathy's LLM Wiki. Upload documents, connect your Claude account via MCP, and have it write your wiki !
Mem0
mem0ai/mem0-mcp
TrueMemory
buildingjoshbetter/truememory
The memory your AI should have had from the start. Automatic capture, automatic recall, 100% local. One SQLite file, zero cloud. Works with Claude Code, Claude CLI, Cursor, Codex CLI, Gemini CLI.
Notion
awkoy/notion-mcp-server
Notion MCP server for Claude, Cursor, ChatGPT & Claude Desktop. Connect AI agents to Notion via Model Context Protocol — pages, databases, blocks, comments, files.
Outline Connector
vortiago/mcp-outline
A Model Context Protocol (MCP) server enabling AI assistants to interact with Outline documentation services.
Vera
lemon07r/vera
Local code search combining BM25, vector similarity, and cross-encoder reranking. Parses 60+ languages with tree-sitter, runs entirely offline, and returns structured results with file paths, line ranges, and symbol metadata. Built in Rust.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?