MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/55
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,297–1,320 of 1,620 · ranked by trust score, then stars
servicenow-api
Knuckles-Team/servicenow-api
ServiceNow MCP Server and API Wrapper
aikstockdata
na77tech-creator/aikstockdata
Korean stock data for AI: KOSPI/KOSDAQ/KONEX closes, DART disclosures with receipt time, post-filing price paths. JSON + remote MCP server, no API key.
Epoch
KyaniteLabs/Epoch
Time estimation MCP server for AI agents: PERT, COCOMO II, Monte Carlo, sprint forecasting, token-to-time mapping, cost estimation, and schedule risk tools.
arr-mcp
Knuckles-Team/arr-mcp
Arr related MCP and A2A / AG-UI Agent
decisions-judge-mcp
clouatre-labs/decisions-judge-mcp
Typed decisions for AI agents as an MCP tool: yes/no probability (noul), choice, and score in one fast request. Backed by the TypeSafe System One model.
EPICS-MCP
epicDirk/EPICS-MCP
Ask an AI assistant about your EPICS control system: live PV values, why a PV is disconnected, and where it appears across ChannelFinder, the Archiver and the alarm tree. Read-only by default.
OpenAPI to Tools
buildwithlayer/openapi-to-tools
KGraph
ajksunkang-aios/KGraph
The Compiler-Aware Operating System Kernel CodeGraph Engine for Token-Efficient Structural Codebase Retrieval
LibreGene
dl-li/LibreGene
An open-source, agent-ready plasmid editor.
libreoffice-mcp
sandraschi/libreoffice-mcp
LibreOffice headless automation via FastMCP — Writer/Calc/Impress convert, ODT merge, PDF combine, folder watch. For Cursor / Claude Desktop.
Angular Starter
4sh/starter-angular
An Angular component library that natively integrates your design tokens to create a seamless bridge between design and code.
audio-transcriber
Knuckles-Team/audio-transcriber
Transcribe audio into text. Agentic AI supported through MCP Server.
cal
Dvorinka/cal
Self-hosted daily toolkit — calendar, tasks, notes, links, files, kanban boards, time tracking, GitHub inbox. One Docker container.
mcp
getDynamoi/mcp
Connect ChatGPT, Claude, Cursor, and other AI agents to Dynamoi for free Spotify Smart Links, music promotion campaigns, analytics, and distribution.
systems-manager
Knuckles-Team/systems-manager
System-Manager will update your system and install/upgrade applications. Supports Agentic AI through MCP Server
vedaksha
arthiqlabs/vedaksha
Vedaksha — clean-room Vedic astrology & astronomical ephemeris engine (kundali, panchanga, dashas, nakshatras, vargas) with sub-arcsecond precision. Rust, Python, WebAssembly, and an MCP server for AI agents.
wso2-docs-mcp-server
iamvirul/wso2-docs-mcp-server
Production-ready MCP server providing RAG-based semantic search over WSO2 documentation (API Manager, Micro Integrator, Choreo, Ballerina, BI , IS).
okfit
spencerbeggs/okfit
Node.js tooling for Google Open Knowlege Format agentic documentation system.
china-law-mcp
thu-lawyer/china-law-mcp
⚖️ 中国法律条文 MCP 服务器 | 378 部法律 · 23,995 条现行法条检索 + 引用核验(防幻觉)| 免费、免注册、免 API key、本地运行 | Chinese statute retrieval + citation verification for LLMs
documentdb-mcp
Knuckles-Team/documentdb-mcp
DocumentDB A2A + MCP Server
selenium-flow
kubed-io/selenium-flow
A selenium mcp and http workflow client.
AI Counsel
blueman82/ai-counsel
True deliberative consensus MCP server where AI models debate and refine positions across multiple rounds
marian-coach-eng-leadership-toolkit
marian-kamenistak/ai-engineering-leader-toolkit
MCP server: engineering leadership answers from 3,662 mentoring sessions. Benchmarks, 1:1 playbooks, developer value calculator. One URL, no install.
opik-openclaw
brucekumar/opik-openclaw
Export OpenClaw agent traces to monitoring systems for improved observability and diagnostic insights.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?