MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/52
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,225–1,248 of 1,620 · ranked by trust score, then stars
agent-skills
youdotcom-oss/agent-skills
You.com skills and plugins for web search, content extraction, research, finance, and integration discovery, helping AI agents build with up-to-date web context.
Django ORM Lens
frowningdev/django-orm-lens
Django ER diagrams, N+1 detection, schema drift & migration-risk linting — in VS Code, a CLI and an MCP server. Static analysis: no database, no django.setup(). Free & MIT.
Pdfmux
nameetp/pdfmux
PDF extraction that audits its own output — and certifies any other extractor's, catching pages they silently dropped. Verify signed manifests offline: free, MIT, no account. 0.903 on opendataloader-bench, #2 of 8 engines. 7-tool MCP server.
Paper Format Agent
zxyasfas/paper_format_agent
DOCX formatter for academic papers with a content-fingerprint guard: proves your text is never altered, only the formatting. Also installable as an agent skill. 毕业论文、学位论文的 Word 自动排版:按格式要求改字体字号、行距、缩进、标题和题注;指纹校验保证只改格式、不动正文,也可做格式检查评分。
AutoMobile
zillow/auto-mobile
Mobile automation suite of tools including an MCP and libraries for test authoring & execution
Mcp Gateway
aarora79/mcp-gateway
MCP Gateway and Registry
Kompl
tuirk/kompl
A compounding LLM-wiki, best fit as a personal second brain that organizes and updates itself as it grows, zero upkeep.
Masquerade
postralai/masquerade
The Privacy Firewall for LLMs
Pond
tenequm/pond
Lossless storage and search for AI agent sessions, across every agentic client.
Minecraft
fundamentallabs/minecraft-mcp
MCP server for minecraft
Agent Orchestrator
haohao-end/mcp-agent
A modular Python framework implementing the Model Context Protocol (MCP). It features a standardized client-server architecture over StdIO, integrating LLMs with external tools, real-time weather data fetching, and an advanced RAG (Retrieval-Augmented Generation) system.
Unifai SDK
unifai-network/unifai-sdk-js
unifai-sdk-js is the Javascript/Typescript SDK for Unifai, an AI native platform for dynamic tools and agent to agent communication.
MyKG
senolisci/mykg
MyKG Knowledge Graph Engine: Turn raw files into knowledge graphs with induced ontology
OpenMSX
nataliapc/mcp-openmsx
A Model Context Protocol (MCP) server for automating openMSX emulator instances. This server provides comprehensive tools for MSX software development, testing, and automation through standardized MCP protocols.
Image Gen
lansespirit/image-gen-mcp
An MCP server that integrates with gpt-image-1 & Gemini imagen4 model for text-to-image generation services
Chucknorris
pollinations/chucknorris
⚡ C̷h̷u̷c̷k̷N̷o̷r̷r̷i̷s̷ MCP server: Helping LLMs break limits. Provides enhancement prompts inspired by elder-plinius' L1B3RT4S
Debugg AI
debugg-ai/debugg-ai-mcp
Zero-Config, Fully AI-Managed End-to-End Testing for all code gen platforms.
Netlify
netlify/netlify-mcp
Netlify's Official MCP server
React Native
mrnitro360/react-native-mcp
A Model Context Protocol (MCP) server providing comprehensive guidance and best practices for React Native development based on official React Native documentation.
Calculator
huhabla/calculator-mcp-server
A Model Context Protocol (MCP) server that provides Claude with advanced mathematical calculation capabilities
Iron Manus
dnnyngyen/ironmanus-mcp
Iron Manus MCP
Iron Manus
dnnyngyen/iron-manus-mcp
Iron Manus MCP
qinyuanpei/mcp-server-weibo
基于 Model Context Protocol 的微博数据接口服务器 - 实时获取微博用户信息、动态内容、热搜榜单、粉丝关注数据。支持用户搜索、内容搜索、话题分析,为 AI 应用提供完整的微博数据接入方案。
Mailgun
mailgun/mailgun-mcp-server
Implementation of Model Context Protocol server for Mailgun APIs
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?