MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/56
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,321–1,344 of 1,620 · ranked by trust score, then stars
acqpath-distribution
reflectme-source/acqpath-distribution
Check declared content rights before RAG, AI input, summarization, training or indexing. Signed RSL evidence via HTTP x402; no legal clearance.
aga-mcp-server
attestedintelligence/aga-mcp-server
Signed decision records for agent vendors facing customer evidence reviews. Public reference gateway and static verifier; pre-pilot, with documented limits.
AgentKit
Yacine-ai-tech/AgentKit
Governed MCP server and agent runtime: signed action approvals, typed tool effects and audit logs for Claude Desktop, Cursor and custom agents.
awesome-ai-red-teaming-jp
Ajay77187718/awesome-ai-red-teaming-jp
整理された日本語のAIレッドチーミング情報集。攻撃手法、ツール、規制、防御、論文をまとめて学べるリソース集
base-http402-extractor-api
psicossz29-netizen/base-http402-extractor-api
Autonomous HTTP 402 Web-to-Markdown API & MCP Server powered by Base L2 micropayments (0.05 USDC).
canon
moonlight-lupin/canon
Local-first, multilingual church system: plan the service, print the bulletin, project the slides, keep members, rotas, records and the church's books. Runs on an office PC or Docker. AI assistants such as Claude connect through a permission-controlled MCP server.
Claudex
Mcalesteryahoo411/Claudex
Connect Claude Code interfaces to Codex and native Claude models using a local bridge.
dayze
gohluke/dayze-mcp
Dayze gives connected AI tools Life Context: your people, plans and memories in a private, correctable record. Hosted MCP (OAuth): https://dayze.com/api/mcp
globalion-video-render
globalion/video-render-mcp
MCP server that renders Hyperplexed-style motion-graphics MP4s from a script. Free msedge-tts voice, Remotion animations, no watermark. Sign in with Google, get an API key, paste the URL into Claude Desktop.
hallucc-mcp
fredyee/hallucc-mcp
MCP server for AI hallucination detection & agent safety — verify claims, guard prompts, gate CUA actions
jorgex-stack
jorgehn98/jorgex-stack
Harness multi-agente portable: instala la config JorgeX (agentes, skills, hooks, Engram, MCPs) en Claude Code, Codex CLI y OpenCode
juridico-pt
linofcp007/juridico-pt
Advogado pessoal e empresarial em Portugal — plugin Claude Code + servidor MCP (referencias, templates, playbooks, checklists e calculadoras juridicas). PT/EN.
ko-qmd
tak-bro/ko-qmd
Local hybrid search for Korean Markdown notes & Obsidian vaults (BM25 + Hangul bigram + Qwen3 + rerank, MCP/CLI/SDK) · 한국어 마크다운 로컬 검색
leanix-agent
Knuckles-Team/leanix-agent
mac-voice-mcp
jeet0007/mac-voice-mcp
Talk with Claude out loud on your Mac — on-device speech with whisper.cpp. An MCP server.
mcp-dotnet
jgbright/mcp-dotnet
Two MCP stdio servers in .NET 10: Microsoft Teams (teams, channels, chats, messages, search) via Microsoft Graph, and Azure DevOps (work items, pull requests, pipelines, repos, search) via its REST API. Interactive Entra ID sign-in instead of PATs; read-only by default with opt-in write and send gat
portainer-agent
Knuckles-Team/portainer-agent
Portainer - Manage your Portainer instance through the Portainer Agent/MCP!
publedge
snapsynapse/publedge
Open recordkeeping protocol for fact-specific written interpretations between two parties: JIAs, RMAs, no-action letters, private letter rulings, advisory opinions. Drafting in public.
sonovault
rekordcloud/sonovault-mcp
MCP server for the SonoVault music metadata API. Search 90M+ tracks, artists, and releases from AI assistants.
ugc-vz-neu
shufflethis/ugc-vz-neu
Kostenloses UGC-Creator-Verzeichnis für DACH – echte Creator mit Portfolio- und Social-Nachweisen. Next.js, REST API v1, MCP-Server (ugc-vz-mcp) für AI-Agents. Keine Provision, keine KI-Avatare.
vision-relay
nan1010082085/claude-plugins
跨环境 AI CLI 插件统一仓库 - Claude Code / Codex CLI / Cursor 等插件集合
voicelayer
EtanHey/voicelayer
Voice I/O MCP for AI coding agents — local TTS + STT, 2 tools (`voice_speak`, `voice_ask`) with ToolAnnotations
Context7
upstash/context7-mcp
Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
Context7
upstash/context7
Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?