MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/49
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,153–1,176 of 1,620 · ranked by trust score, then stars
memcastle
noirbizarre/memcastle
🧠 An AI memory service inspired by MemPalace 🏰
QMD - Query Markup Documents
tobi/qmd
mini cli search engine for your docs, knowledge bases, meeting notes, whatever. Tracking current sota approaches while being all local
Git
idosal/git-mcp
Put an end to code hallucinations! GitMCP is a free, open-source, remote MCP server for any GitHub project
Atlassian Integration
sooperset/mcp-atlassian
MCP server for Atlassian tools (Confluence, Jira)
Jsondiffpatch
benjamine/jsondiffpatch
Diff & patch JavaScript objects
Cipher
campfirein/cipher
ByteRover CLI (brv) - The portable memory layer for autonomous coding agents (formerly Cipher)
byterover-cli
campfirein/byterover-cli
ByteRover CLI (brv) - The portable memory layer for autonomous coding agents (formerly Cipher)
HttpRunner
httprunner/httprunner
HttpRunner 是一款开源的 API/UI 测试框架,简单易用,功能强大,具有丰富的插件化机制和高度的可扩展能力。
dsh-ops
T-Auto/dsh-ops
A toolkit for low-level operations in DSH, designed to reduce token usage and task execution time / DSH 底层操作工具插件,旨在减少 Token 消耗与任务耗时
Paper Search
openags/paper-search-mcp
MCP, CLI, Skills for searching and downloading academic papers from multiple sources like arXiv, PubMed, bioRxiv, etc.
MCP Server for MySQL
benborla/mcp-server-mysql
A Model Context Protocol server that provides read-only access to MySQL databases. This server enables LLMs to inspect database schemas and execute read-only queries.
MySQL
benborla/mcp-server-mysql
A Model Context Protocol server that provides read-only access to MySQL databases. This server enables LLMs to inspect database schemas and execute read-only queries.
Video Vision
jordanrendric/claude-video-vision
Give Claude the ability to watch and understand videos — Claude Code plugin with frame extraction and multimodal audio analysis
Better Chatbot
better-chatbot/better-chatbot
Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.
Client Chatbot
cgoinglove/mcp-client-chatbot
Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.
Better Chatbot
cgoinglove/better-chatbot
Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.
Keinsaas Navigator
keinsaasforever/better-chatbot
Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.
x-reader
runesleo/x-reader
Universal content reader MCP Server for 10+ platforms
Jina AI
jina-ai/mcp
Official Jina AI Remote MCP Server
Obsidian Tools
jacksteamdev/obsidian-mcp-tools
Add Obsidian integrations like semantic search and custom Templater prompts to Claude or any MCP client.
Google Ads
cohnen/mcp-google-ads
An MCP tool that connects Google Ads with Claude AI/Cursor and others, allowing you to analyze your advertising data through natural language conversations. This integration gives you access to campaign information, performance metrics, keyword analytics, and ad management—all through simple chat wi
Semgrep
semgrep/mcp
A MCP server for using Semgrep to scan code for security vulnerabilities.
Proxmox Plus
rekklesna/proxmoxmcp-plus
Use MCP and OpenAPI to safely control Proxmox VE VMs, LXCs, backups, and snapshots from LLMs and AI agents.
Hub
ravitemer/mcp-hub
A centralized manager for Model Context Protocol (MCP) servers with dynamic server management and monitoring
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?