MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/51

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

1,201–1,224 of 1,620 · ranked by trust score, then stars

ZotSeek

introfini/zotseek

✕BLOCK D

AI semantic search for Zotero, with a built-in MCP server for AI agents (Claude Code, Codex). Find papers by meaning. 100% local and private.

★ 2193 read

Unreal Motion Graphics

winyunq/unrealmotiongraphicsmcp

✕BLOCK D

🚀 UE5-UMG-MCP: A deep-focused MCP for Unreal Engine UMG layout. Designed to maximize AI efficiency within limited context windows by prioritizing precision in UI structure, animations, and blueprint integration.

★ 2063 readstdio

UTCP Bridge

universal-tool-calling-protocol/utcp-mcp

✕BLOCK D

All-in-one MCP server that can connect your AI agents to any native endpoint, powered by UTCP

★ 2067 readstdio

Postgres

ericzakariasson/pg-mcp-server

✕BLOCK D

MCP Server for Postgres

★ 1801 readstdio

Stock

huweihua123/stock-mcp

✕BLOCK D

专业的金融市场数据 MCP 服务器 - 支持A股/美股/加密货币,原生 MCP 协议,AI Agent 友好

★ 17823 readstreamable-http

WeApp Dev

yfmeii/weapp-dev-mcp

✕BLOCK D

FastMCP server for automating WeChat Mini Program developer tooling

★ 17435 read

Furikake

ashwwwin/furi

✕BLOCK D

CLI & API for MCP management

★ 1721 read

Memory

puliczek/mcp-memory

✕BLOCK D

🔥🖥️ MCP Memory is a MCP Server that gives MCP Clients (Cursor, Claude, Windsurf and more) the ability to remember information about users (preferences, behaviors) across conversations.

★ 1612 read

Llmctx

khromov/llmctx

✕BLOCK D

Svelte developer documentation as an MCP and in llms.txt format

★ 1582 readsse

Svelte LLM

khromov/svelte-llm-mcp

✕BLOCK D

Svelte developer documentation as an MCP and in llms.txt format

★ 1582 readsse

OpenAPI Proxy

matthewhand/mcp-openapi-proxy

✕BLOCK D

MCP server that dynamically exposes REST APIs defined by OpenAPI specs. Dual-stack MCP 1.x/2.x with native Streamable HTTP.

★ 1561 readstdio

Live Tennis API

livetennisapi/livetennisapi-mcp

✕BLOCK D

MCP server for the Live Tennis API — give Claude, Cursor and other LLM agents real-time tennis scores, odds and model win-probability

★ 15224 readstdio

PostHog

posthog/mcp

✕BLOCK D

Official PostHog MCP Server 🦔

★ 1513 readstreamable-http

MCP-X Agent

timecyber/mcp-x

✕BLOCK D

这是一个MCP客户端,让你轻松配置各个大模型,对接各种MCP Server而开发。This is an MCP client that allows you to easily configure various large models and develop interfaces with various MCP servers.

★ 1416 readsse

Fitter

pxyup/fitter

✕BLOCK D

New way for collect information from the API's/Websites

★ 1333 readstdio

RivalSearch

damionrashford/rivalsearchmcp

✕BLOCK D

Deterministic research MCP server on FastMCP 3 — 5-engine web search, 9-platform social search, 6 academic DBs, news aggregation, entity profiles, conflict detection, document analysis. No API keys. No in-server LLM. Structured outputs for agent chaining.

★ 1325 read

Streamable Http

invariantlabs-ai/mcp-streamable-http

✕BLOCK D

Example implementation of MCP Streamable HTTP client/server in Python and TypeScript.

★ 1322 readstreamable-http

MiniMax

minimax-ai/minimax-mcp-js

✕BLOCK D

Official MiniMax Model Context Protocol (MCP) JavaScript implementation that provides seamless integration with MiniMax's powerful AI capabilities including image generation, video generation, text-to-speech, and voice cloning APIs.

★ 13036 readsse

Agent Search

lennney/agent-search-mcp

✕BLOCK D

Free-first Chinese and English web search MCP using zero-key sources and inspectable evidence.

★ 1109 readstdio

OpenTofu

opentofu/opentofu-mcp-server

✕BLOCK D

OpenTofu MCP Server for accessing the OpenTofu Registry

★ 1107 readstdio

Shadcn-Vue

helloggx/shadcn-vue-mcp

✕BLOCK D

Shadcn-vue and Tailwind CSS are essential for component development, offering developers a fast and high-quality experience in Vue component development.

★ 1085 read

S&P 500

zhensherlock/sp500-mcp-server

✕BLOCK D

An MCP server and Next.js web app for querying S&P 500 company data from Supabase, with tools for company info, news, officers, and SEC filings, plus embedded MCP App UI resources, Elicitation, and Sampling support.

★ 1076 readstreamable-http

Openrouter Mcp Multimodal

stabgan/openrouter-mcp-multimodal

✕BLOCK D

MCP server for OpenRouter — chat with 300+ LLMs (Claude, Gemini, GPT), analyze images / audio / video, generate images / speech / music / video (Veo 3.1, Sora, Seedance, Wan) from Claude Desktop, Cursor, Kiro, VS Code.

★ 971 readstdio

Arm

arm/mcp

✕BLOCK D

Arm's MCP server

★ 912 readstdio

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.