MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/54
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,273–1,296 of 1,620 · ranked by trust score, then stars
Office Document Generator
dvejsada/mcp-ms-office-documents
MCP server providing tools to create Ms Office documents like presentations, emails, spreadsheets and word docs (pptx, docx, eml, xlsx)
Office Documents
forlegalai/mcp-ms-office-documents
MCP server providing tools to create Ms Office documents like presentations, emails, spreadsheets and word docs (pptx, docx, eml, xlsx)
Manus
huyouare/manus-mcp
MCP server that provides Manus-like capabilities
Okta
fctr-id/okta-mcp-server
The Okta MCP Server is a groundbreaking tool built by the team at Fctr that enables AI models to interact directly with your Okta environment using the Model Context Protocol (MCP). Built specifically for IAM engineers, security teams, and Okta administrators, it implements the MCP specification to
Plasmate
plasmate-labs/plasmate
Browser engine for agents. HTML in, structured Semantic Object Model out. Native MCP and AWP with a supported CDP subset. Apache-2.0.
YouTube Transcript
ergut/youtube-transcript-mcp
Zero-setup YouTube transcript extraction for Claude. Works on mobile, desktop, and web - no local installation required.
AusLaw
russellbrenner/auslaw-mcp
jurisd is an open, local-first research and drafting workbench for AU/NZ law. It gives you, or the AI assistant you already use, fast answers from legislation and case law where every claim traces back to the primary source. It runs locally by default, so confidential and privileged work never has t
Currency Conversion
wesbos/currency-conversion-mcp
A currency conversion MCP server
MCPMate
loocor/mcpmate
MCPMate is a progressive MCP management center for organizing servers, clients, profiles, capabilities, and runtime visibility in one local workspace.
PRD Creator
saml1211/prd-mcp-server
Flagship Model Context Protocol server for generating Product Requirement Documents (PRDs) from codebase context.
Gemini
houtini-ai/gemini-mcp
Google Gemini MCP - Use Google's visual, video and chat capabilities in your AI Assistant. Uses MCP Apps to preview created images, landing pages, SVGs and video
LM Studio Toolpack
zihaofu245/lmstudio-toolpack
A MCP stdio toolpack for local LLMs
ThoughtSpot
thoughtspot/mcp-server
The ThoughtSpot MCP Server
Relace
possible055/relace-mcp
Unofficial Relace MCP client with AI features. Personal project; not affiliated with or endorsed by Relace
Ai-Spark
vgiri2015/ai-spark-mcp-server
Frontend Testing
studentofjs/mcp-frontend-testing
Frontend testing tools for Model Context Protocol
Callcenter.js
gerkensm/callcenter.js-mcp
Callcenter.JS AI Voice Agent VOIP Connector, MCP + CLI
Readwise
iamalexander/readwise-mcp
MCP server for Readwise
Data Agents
hottechstack/dataagents
Data Agents are intelligent assistants built by data engineers to help non-data professionals navigate the organization’s data infrastructu
Authenticated Cloud Run
the-freetech-company/mcp-sse-authenticated-cloud-run
Host an Model Context Protocol SSE deployment on Cloud Run, Authenticating with IAM.
Nodit
noditlabs/nodit-mcp-server
A Model Context Protocol (MCP) server for AI agents to interact with blockchain data via Nodit’s Web3 Data and Node APIs. Enables LLMs to access structured, multi-chain blockchain context with zero blockchain-specific logic.
T2000
mission69b/t2000
Agent marketplace
Noema
Fail-Safe/Noema
The intentional memory layer for your AI agents.
ENCODE Toolkit
ammawla/encode-toolkit
MCP server and Claude Code plugin for the ENCODE Project: search, download and analyze ChIP-seq, ATAC-seq, RNA-seq, WGBS, Hi-C and CUT&RUN data with 20 tools, 47 skills and 7 Nextflow pipelines
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?