MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/48
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,129–1,152 of 1,620 · ranked by trust score, then stars
kilotest
jrpool/kilotest
An ensemble testing service with a focus on accessibility
uspto_fpd_mcp
Tam1379/uspto_fpd_mcp
🚀 Improve patent analysis with a high-performance MCP server for USPTO Final Petition Decisions, featuring context reduction and customizable fields.
mcp-brasil
ungarbed-triggerfish318/mcp-brasil
Conecte agentes de IA a 41 APIs públicas brasileiras para acessar dados do governo, com 363 tools, 87 resources e 62 prompts
Spotify Scraper
aliakhtari78/spotifyscraper
Extract public Spotify data — tracks, albums, artists, playlists, podcasts & lyrics — without the official API. Sync + async, typed models, one dependency.
Project OS for Codex
herry2059/project-os-for-codex
Open-source control plane for Codex projects: Git-backed context, visible agent progress, scoped MCP access, resumable work, and safe handoffs.
Gemini
bsmi021/mcp-gemini-server
This project provides a dedicated MCP (Model Context Protocol) server that wraps the @google/genai SDK. It exposes Google's Gemini model capabilities as standard MCP tools, allowing other LLMs (like Cline) or MCP-compatible systems to leverage Gemini's features as a backend workhorse.
LegalContext
protomated/legal-context-ce
LegalContext is an open-source Model Context Protocol (MCP) server that creates a secure, standardized bridge between law firms' document management systems (specifically Clio) and AI assistants (starting with Claude Desktop)
MiMo Free API
fu-jie/mimo-free-api-mcp
MiMo Free API MCP: 基于官网逆向的高性能 OpenAI / HTTP MCP 代理网关。支持搜索、识图、长文本分段及 SQLite 持久化。
OpenAgentPack
modelstudioai/OpenAgentPack
Manage, review, and migrate cloud AI agents with Git and YAML. The open-source IaC control plane for managed AI agents.
OpenOSINT
openosint/openosint
AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.
OpenZIM
cameronrye/openzim-mcp
OpenZIM MCP is a modern, secure, and high-performance MCP (Model Context Protocol) server that enables AI models to access and search ZIM format knowledge bases offline.
Code Indexer
zxfgds/mcp-code-indexer
ADK Redis
redis-developer/adk-redis
Redis integration for Google Agent Development Kit (ADK) - Memory, Sessions, Search Tools, MCP
ymm4MCP
SCPgamerscp/ymm4MCP
ゆっくりムービーメーカー4のMCPです。将来的にはゆっくり動画を全自動で作れるようにしたいです。
seo
110kc3/seo
Open registry and discovery API for AI products, agent tools, and MCP services.
figloo
g761007/figloo
Chrome extension + local MCP server that lets coding agents like Claude Code and Codex read Figma designs through the web UI with view access: walk layers, inspect properties, take screenshots, export assets. No Figma API; never edits the design.
Brasil
jxnxts/mcp-brasil
MCP Server para 70 APIs públicas brasileiras
Brasil
mcp-brasil/mcp-brasil
MCP Server para 70 APIs públicas brasileiras
Blockrun Mcp
BlockRunAI/blockrun-mcp
Live data for AI agents — search, research, markets, crypto, X/Twitter. Pay-per-call via x402 micropayments.
Perplexity
automations-project/vscode-perplexity-mcp
Perplexity AI search, reasoning, research, and compute - MCP server, dashboard, and multi-IDE auto-config for VS Code.
Nexus
adawalli/nexus
MCP Server to make searching openrouter easy
shyn
shyn-labs/shyn
shyn — a register of your days. Local-first memory for your Mac: pages, meetings, notes — encrypted on-device, recalled by your AI over MCP.
BlockRun
blockrunai/blockrun-mcp
Live data for AI agents — search, research, markets, crypto, X/Twitter. Pay-per-call via x402 micropayments.
Figma Context
1yhy/figma-context-mcp
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?