MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/54

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

1,273–1,296 of 1,620 · ranked by trust score, then stars

Office Document Generator

dvejsada/mcp-ms-office-documents

✕BLOCK D

MCP server providing tools to create Ms Office documents like presentations, emails, spreadsheets and word docs (pptx, docx, eml, xlsx)

★ 411 readstreamable-http

Office Documents

forlegalai/mcp-ms-office-documents

✕BLOCK D

MCP server providing tools to create Ms Office documents like presentations, emails, spreadsheets and word docs (pptx, docx, eml, xlsx)

★ 411 readstreamable-http

Manus

huyouare/manus-mcp

✕BLOCK D

MCP server that provides Manus-like capabilities

★ 396 readstdio

Okta

fctr-id/okta-mcp-server

✕BLOCK D

The Okta MCP Server is a groundbreaking tool built by the team at Fctr that enables AI models to interact directly with your Okta environment using the Model Context Protocol (MCP). Built specifically for IAM engineers, security teams, and Okta administrators, it implements the MCP specification to

★ 384 readsse

Plasmate

plasmate-labs/plasmate

✕BLOCK D

Browser engine for agents. HTML in, structured Semantic Object Model out. Native MCP and AWP with a supported CDP subset. Apache-2.0.

★ 381 readstdio

YouTube Transcript

ergut/youtube-transcript-mcp

✕BLOCK D

Zero-setup YouTube transcript extraction for Claude. Works on mobile, desktop, and web - no local installation required.

★ 381 read

AusLaw

russellbrenner/auslaw-mcp

✕BLOCK D

jurisd is an open, local-first research and drafting workbench for AU/NZ law. It gives you, or the AI assistant you already use, fast answers from legislation and case law where every claim traces back to the primary source. It runs locally by default, so confidential and privileged work never has t

★ 3712 readstdio

Currency Conversion

wesbos/currency-conversion-mcp

✕BLOCK D

A currency conversion MCP server

★ 364 read

MCPMate

loocor/mcpmate

✕BLOCK D

MCPMate is a progressive MCP management center for organizing servers, clients, profiles, capabilities, and runtime visibility in one local workspace.

★ 369 readstdio

PRD Creator

saml1211/prd-mcp-server

✕BLOCK D

Flagship Model Context Protocol server for generating Product Requirement Documents (PRDs) from codebase context.

★ 361 readstdio

Gemini

houtini-ai/gemini-mcp

✕BLOCK D

Google Gemini MCP - Use Google's visual, video and chat capabilities in your AI Assistant. Uses MCP Apps to preview created images, landing pages, SVGs and video

★ 348 readstdio

LM Studio Toolpack

zihaofu245/lmstudio-toolpack

✕BLOCK D

A MCP stdio toolpack for local LLMs

★ 342 readstdio

ThoughtSpot

thoughtspot/mcp-server

✕BLOCK D

The ThoughtSpot MCP Server

★ 345 readsse

Relace

possible055/relace-mcp

✕BLOCK D

Unofficial Relace MCP client with AI features. Personal project; not affiliated with or endorsed by Relace

★ 331 readstreamable-http

Ai-Spark

vgiri2015/ai-spark-mcp-server

✕BLOCK D
★ 292 read

Frontend Testing

studentofjs/mcp-frontend-testing

✕BLOCK D

Frontend testing tools for Model Context Protocol

★ 264 readsse

Callcenter.js

gerkensm/callcenter.js-mcp

✕BLOCK D

Callcenter.JS AI Voice Agent VOIP Connector, MCP + CLI

★ 252 read

Readwise

iamalexander/readwise-mcp

✕BLOCK D

MCP server for Readwise

★ 251 readsse

Data Agents

hottechstack/dataagents

✕BLOCK D

Data Agents are intelligent assistants built by data engineers to help non-data professionals navigate the organization’s data infrastructu

★ 241 read

Authenticated Cloud Run

the-freetech-company/mcp-sse-authenticated-cloud-run

✕BLOCK D

Host an Model Context Protocol SSE deployment on Cloud Run, Authenticating with IAM.

★ 232 readsse

Nodit

noditlabs/nodit-mcp-server

✕BLOCK D

A Model Context Protocol (MCP) server for AI agents to interact with blockchain data via Nodit’s Web3 Data and Node APIs. Enables LLMs to access structured, multi-chain blockchain context with zero blockchain-specific logic.

★ 238 readstdio

T2000

mission69b/t2000

✕BLOCK D

Agent marketplace

★ 231 read

Noema

Fail-Safe/Noema

✕BLOCK D

The intentional memory layer for your AI agents.

★ 223 readstreamable-http

ENCODE Toolkit

ammawla/encode-toolkit

✕BLOCK D

MCP server and Claude Code plugin for the ENCODE Project: search, download and analyze ChIP-seq, ATAC-seq, RNA-seq, WGBS, Hi-C and CUT&RUN data with 20 tools, 47 skills and 7 Nextflow pipelines

★ 2120 readstdio

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.