MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/5

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

97–120 of 1,620 · ranked by trust score, then stars

tty-table

tecfu/tty-table

✓SAFE B

Cross-platform terminal table (Windows, Linux, macOS). Can also run in the browser console and provide. MCP server gives your coding agent with a quick way to add text-wrapped ASCII tables to your README or other files.

★ 3101 readstdio

Facebook Ads Library

proxy-intell/facebook-ads-library-mcp

✓SAFE B

MCP Server for Facebook ADs Library - Get instant answers from FB's ad library

★ 3085 readstdio

Perplexity

jsonallen/perplexity-mcp

✓SAFE B

A Model Context Protocol (MCP) server that provides web search functionality using Perplexity AI's API.

★ 3081 readstdio

Excel Agent

sylvianai/sv-excel-agent

✓SAFE B

An Excel AI agent that uses MCP tools to let LLMs read, edit, and automate Excel spreadsheets.

★ 3051 read

Reddit

arindam200/reddit-mcp

✓SAFE B

Model Context Protocol server implementation for Reddit

★ 30110 read

Researcher

dainfernalcoder/perplexity-mcp

✓SAFE B

A Model Context Protocol (MCP) server for research and documentation assistance using Perplexity AI. Won 1st @ Cline Hackathon

★ 2983 readstdio

Web Research

mzxrai/mcp-webresearch

✓SAFE B

MCP web research server (give Claude real-time info from the web)

★ 2983 readstdio

Google Search Console

saurabhsharma2u/search-console-mcp

✓SAFE B

Search & analytics data as infrastructure — MCP server for Google Search Console, Bing Webmaster Tools, Google Adsense and GA4, designed for AI agents and automation.

★ 29620 readsse

Proxmox Manager

canvrno/proxmoxmcp

✓SAFE B

MCP for Proxmox integration in Cline

★ 2935 read

o3 Search

yoshiko-pg/o3-search-mcp

✓SAFE B

MCP server for OpenAI o3 web search

★ 2861 readstdio

mcp-trends-hub

baranwang/mcp-trends-hub

✓SAFE B

基于 Model Context Protocol (MCP) 协议的全网热点趋势一站式聚合服务

★ 27121 readstdio

OSP Marketing Tools

open-strategy-partners/osp_marketing_tools

✓SAFE B

A Model Context Protocol (MCP) server that empowers LLMs to use some of Open Srategy Partners' core writing and product marketing techniques.

★ 2706 read

ECharts

hustcc/mcp-echarts

✓SAFE B

🧬 Generate visual charts using ECharts with AI MCP dynamically, used for chart generation and data analysis.

★ 26916 readsse

Trends Hub

baranwang/mcp-trends-hub

✓SAFE B

基于 Model Context Protocol (MCP) 协议的全网热点趋势一站式聚合服务

★ 26921 readstdio

Maigret

burtthecoder/mcp-maigret

✓SAFE B

MCP server for maigret, a powerful OSINT tool that collects user account information from various public sources.

★ 2672 readstdio

Gemini

aliargun/mcp-server-gemini

✓SAFE B

MCP server implementation for Google's Gemini API

★ 26117 read

Seo

cnych/seo-mcp

✓SAFE B

A free SEO tool MCP (Model Control Protocol) service based on Ahrefs data. Includes features such as backlinks, keyword ideas, and more.

★ 2604 read

Zabbix

mpeirone/zabbix-mcp-server

✓SAFE B

🔌 Complete MCP server for Zabbix integration — Connect AI assistants to Zabbix monitoring with a single unified tool covering 100% of Zabbix APIs. Includes read-only mode and documentation tools for seamless exploration of hosts, items, triggers, templates, problems, and more.

★ 2562 readstreamable-http

Aipolabs

aipotheosis-labs/aipolabs-mcp

✓SAFE B

MCP server(s) for Aipolabs ACI.dev

★ 2521 readstdio

Scholar Search

silung/scholar-search-mcp

✓SAFE B

An MCP server for academic paper search that integrates with AI assistants (e.g., Claude Code, Cursor), enabling them to search and retrieve academic paper metadata.

★ 2488 readstdio

Prompt Server

gdli6177/mcp-prompt-server

✓SAFE B

这是一个基于Model Context Protocol (MCP)的服务器,用于根据用户任务需求提供预设的prompt模板,帮助Cline/Cursor/Windsurf...更高效地执行各种任务。服务器将预设的prompt作为工具(tools)返回,以便在Cursor和Windsurf等编辑器中更好地使用。

★ 2472 readstdio

Figma Flutter

mhmzdev/figma-flutter-mcp

✓SAFE B

An MCP server that provides the coding agents Figma's design token to write Flutter code.

★ 24413 readstdio

Google Analytics

surendranb/google-analytics-mcp

✓SAFE B

Google Analytics 4 data to AI agents, agentic workflows, and MCP clients. Give agents analysis-ready access to website traffic, user behavior, and performance data with schema discovery, server-side aggregation, and safe defaults that reduce data wrangling.

★ 24211 readstdio

Mindmap

yuchenssr/mindmap-mcp-server

✓SAFE B

mindmap, mcp server, artifact

★ 2401 readstdio

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.