MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/47

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

1,105–1,128 of 1,620 · ranked by trust score, then stars

WeChat Official Accounts Scraper

ditingdapeng/mcpwechatofficialaccounts

!CAUTION B

微信公众号文章MCP工具

★ 433 readstdio

seamless

arctop/seamless

!CAUTION B

Local-first shared memory and task coordination for AI coding agents. One Go binary, MCP server, markdown files you own. Hooks for Claude Code and Codex CLI (and their desktop apps).

★ 63 readstreamable-http

voyagier-cli

Voyagier-Travel/voyagier-cli

!CAUTION B

Search, plan, and book real travel from the command line or any AI agent. Flights, hotels, activities — price-gated booking, quotes, MCP server built in.

★ 13 readstdio

cool91

Okle42/cool91

!CAUTION B

Apple Silicon temperature & fan monitor with real throttle detection, custom fan curves, and a Claude Code gate that waits only when your Mac throttles. English + 繁體中文.

★ 06 readstdio

mapizarro1-foragex402

mapizarro1/foragex402

!CAUTION B

Meta-search MCP for x402 agent-payable services -- find paid APIs across every registry.

★ 02 readstreamable-http

Proxy

punkpeye/mcp-proxy

!CAUTION B

A TypeScript streamable HTTP and SSE proxy for MCP servers that use stdio transport.

★ 2921 readsse

Canvas

vishalsachdev/canvas-mcp

!CAUTION B

Canvas LMS MCP server — up to 102 tools and 8 agent skills for students & educators. Works with Claude, Cursor, Codex, and 40+ agents.

★ 2801 readstdio

Anylist

bobby060/anylist-mcp

!CAUTION B

Unofficial MCP Server for Anylist

★ 325 readsse

Domain Search

dorukardahan/domain-search-mcp

!CAUTION C

Zero-config domain availability MCP server for Claude & ChatGPT. Live pricing via Porkbun, premium/auction detection via GoDaddy, AI suggestions, RDAP/WHOIS fallback. Stdio + HTTP.

★ 288 readstdio

UI/UX Design Automation Suite with MCP

panktishah62/mcp-stack-for-ui-ux-designers

!CAUTION B

An end-to-end Model Context Protocol (MCP) solution that streamlines the entire UI/UX design workflow - from gathering inspiration to development handoff. This suite integrates multiple specialized MCP servers to automate and enhance the design process through AI assistance.

★ 279 readsse

togomcp

dbcls/togomcp

!CAUTION B

MCP server for life-science knowledge graphs

★ 185 readstdio

senado-br-mcp-cloudflare

SidneyBissoli/senado-br-mcp-cloudflare

!CAUTION C

Hosted MCP server for the Brazilian Federal Senate on Cloudflare Workers — 66 tools, 4 prompts, 5 resources. Legislative + administrative + e-Cidadania. Also on npm (npx senado-br-mcp).

★ 669 readstdio

OpenCode Orchestra

Oeronteros/opencode-orchestra

!CAUTION B
★ 01 read

x402-manifest

silentsw0rd/x402-manifest

!CAUTION B
★ 01 readsse

MinerU Tianshu

magicyuan876/mineru-tianshu

!CAUTION C

天枢 - 企业级 AI 一站式数据预处理平台 | PDF/Office转Markdown | 支持MCP协议AI助手集成 | Vue3+FastAPI全栈方案 | 文档解析 | 多模态信息提取

★ 8214 readstreamable-http

Roundtable AI

askbudi/roundtable

!CAUTION C

Zero-configuration MCP server that unifies multiple AI coding assistants (Codex, Claude Code, Cursor, Gemini) through intelligent auto-discovery and standardized interface

★ 1259 read

Intervals.icu

hhopke/intervals-icu-mcp

!CAUTION C

Read/write MCP server for Intervals.icu — training data, planning, and structured workout generation.

★ 892 readstdio

OpenEvidence

bakhtiersizhaev/openevidence-mcp

!CAUTION C

First open-source OpenEvidence MCP server: browser-session medical research tools for Codex, Claude Code, and MCP clients

★ 435 readstdio

sbor

sborxyz/sbor

!CAUTION C

Benchmark lending rates for Bitcoin DeFi, read from contract state and posted on-chain on Arc, Base, Hyperliquid, Solana and Stacks. Published daily, free to use, built for agents.

★ 07 readstdio

Mapbox

mapbox/mcp-server

!CAUTION C

Mapbox Model Context Protocol (MCP) server

★ 35818 readstdio

OSCAL Tools

awslabs/mcp-server-for-oscal

!CAUTION C

OSCAL tools for AI agents

★ 531 readstdio

agent-comms

ExaDev/agent-comms

!CAUTION C

Cross-harness communication mesh for LLM agents. Rooms, DMs, presence, and visibility.

★ 296 readstdio

Etsy SEO Generator

semihbugrasezer/etsy-seo-mcp

!CAUTION C

AI-powered Etsy product listing generator for Claude Desktop Generate perfect SEO titles, descriptions, and tags in seconds

★ 284 readstdio

Blaxel TypeScript SDK

blaxel-ai/sdk-typescript

✓SAFE C

Typescript SDK for Blaxel

★ 101 readstreamable-http

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.