MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/51
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,201–1,224 of 1,620 · ranked by trust score, then stars
ZotSeek
introfini/zotseek
AI semantic search for Zotero, with a built-in MCP server for AI agents (Claude Code, Codex). Find papers by meaning. 100% local and private.
Unreal Motion Graphics
winyunq/unrealmotiongraphicsmcp
🚀 UE5-UMG-MCP: A deep-focused MCP for Unreal Engine UMG layout. Designed to maximize AI efficiency within limited context windows by prioritizing precision in UI structure, animations, and blueprint integration.
UTCP Bridge
universal-tool-calling-protocol/utcp-mcp
All-in-one MCP server that can connect your AI agents to any native endpoint, powered by UTCP
Postgres
ericzakariasson/pg-mcp-server
MCP Server for Postgres
Stock
huweihua123/stock-mcp
专业的金融市场数据 MCP 服务器 - 支持A股/美股/加密货币,原生 MCP 协议,AI Agent 友好
WeApp Dev
yfmeii/weapp-dev-mcp
FastMCP server for automating WeChat Mini Program developer tooling
Furikake
ashwwwin/furi
CLI & API for MCP management
Memory
puliczek/mcp-memory
🔥🖥️ MCP Memory is a MCP Server that gives MCP Clients (Cursor, Claude, Windsurf and more) the ability to remember information about users (preferences, behaviors) across conversations.
Llmctx
khromov/llmctx
Svelte developer documentation as an MCP and in llms.txt format
Svelte LLM
khromov/svelte-llm-mcp
Svelte developer documentation as an MCP and in llms.txt format
OpenAPI Proxy
matthewhand/mcp-openapi-proxy
MCP server that dynamically exposes REST APIs defined by OpenAPI specs. Dual-stack MCP 1.x/2.x with native Streamable HTTP.
Live Tennis API
livetennisapi/livetennisapi-mcp
MCP server for the Live Tennis API — give Claude, Cursor and other LLM agents real-time tennis scores, odds and model win-probability
PostHog
posthog/mcp
Official PostHog MCP Server 🦔
MCP-X Agent
timecyber/mcp-x
这是一个MCP客户端,让你轻松配置各个大模型,对接各种MCP Server而开发。This is an MCP client that allows you to easily configure various large models and develop interfaces with various MCP servers.
Fitter
pxyup/fitter
New way for collect information from the API's/Websites
RivalSearch
damionrashford/rivalsearchmcp
Deterministic research MCP server on FastMCP 3 — 5-engine web search, 9-platform social search, 6 academic DBs, news aggregation, entity profiles, conflict detection, document analysis. No API keys. No in-server LLM. Structured outputs for agent chaining.
Streamable Http
invariantlabs-ai/mcp-streamable-http
Example implementation of MCP Streamable HTTP client/server in Python and TypeScript.
MiniMax
minimax-ai/minimax-mcp-js
Official MiniMax Model Context Protocol (MCP) JavaScript implementation that provides seamless integration with MiniMax's powerful AI capabilities including image generation, video generation, text-to-speech, and voice cloning APIs.
Agent Search
lennney/agent-search-mcp
Free-first Chinese and English web search MCP using zero-key sources and inspectable evidence.
OpenTofu
opentofu/opentofu-mcp-server
OpenTofu MCP Server for accessing the OpenTofu Registry
Shadcn-Vue
helloggx/shadcn-vue-mcp
Shadcn-vue and Tailwind CSS are essential for component development, offering developers a fast and high-quality experience in Vue component development.
S&P 500
zhensherlock/sp500-mcp-server
An MCP server and Next.js web app for querying S&P 500 company data from Supabase, with tools for company info, news, officers, and SEC filings, plus embedded MCP App UI resources, Elicitation, and Sampling support.
Openrouter Mcp Multimodal
stabgan/openrouter-mcp-multimodal
MCP server for OpenRouter — chat with 300+ LLMs (Claude, Gemini, GPT), analyze images / audio / video, generate images / speech / music / video (Veo 3.1, Sora, Seedance, Wan) from Claude Desktop, Cursor, Kiro, VS Code.
Arm
arm/mcp
Arm's MCP server
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?