MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/57
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,345–1,368 of 1,620 · ranked by trust score, then stars
Media Crawler
mcp-service/media-crawler-mcp-service
一个功能强大的多平台自媒体数据采集MCP工具,支持B站、小红书、抖音、快手、抖音微博、贴吧、知乎等主流平台的公开信息抓取。
godot-agent
aigengame/godot-agent
Godot automation for AI agents to build and verify projects through a CLI, Agent Skill, or MCP server, with structured results, headless operations, and live runtime control.
rustyhand
Tamang4607/rustyhand
Build an open-source Rust agent OS for autonomous Telegram agents, with one binary, APIs, and a tested Rust codebase
LetsFG
letsfg/letsfg
Agent-native flight & hotel search and booking — MCP server, CLI, and Python/JS SDKs. Every airline in the world, major booking sites and OTAs, with per-flight reliability history.
Elementor
msrbuilds/elementor-mcp
WordPress plugin that turns Elementor & WordPress into an MCP server. 500+ AI-ready tools for building, editing, and managing page designs programmatically.
Flow Nexus
ruvnet/flow-nexus
Flow Nexus is the first competitive agentic platform built entirely on MCP. Deploy autonomous AI swarms, train neural networks, and compete in coding challenges while earning rUv credits. Transform agentic engineering mastery into lived experience through gamified cloud development where agents sp
All About AI
allaboutai-yt/mcp-servers
All About AI MCP Servers
VideoDB Agent Toolkit
video-db/agent-toolkit
An open-source agent toolkit that auto-syncs SDK versions, docs, and examples—built for seamless integration with LLMs, and AI agents ( MCP compatible).
container-manager-mcp
Knuckles-Team/container-manager-mcp
Manage containers on docker, podman, compose, and docker swarm through an MCP Server for Agentic AI
mcp-framework
QuantGeekDev/mcp-framework
The Typescript MCP Framework
Mcp Framework
quantgeekdev/mcp-framework
The Typescript MCP Framework
Spec Workflow
kingkongshot/specs-workflow-mcp
Intelligent spec workflow management MCP server
Package Docs
sammcj/mcp-package-docs
An MCP server that provides LLMs with efficient access to package documentation across multiple programming languages
Brain
mordechaipotash/brain-mcp
The recorder for your AI conversations — local-first MCP memory that keeps byte-exact copies of your Claude Code, Codex and Pi sessions (Claude Code deletes its own after 30 days) and answers with a citation or abstains. DuckDB.
WeChat Claude Code
dcatfly/weixin_claude_code
WeChat Channel plugin for Claude Code — bidirectional messaging between WeChat and Claude Code via MCP protocol
WEBGhosting
yranjan06/webghosting-mcp
Intelligent stealth browser MCP server for AI agents with 30 tools, 22 anti fingerprint scripts, and LLM powered extraction. Works seamlessly with Cursor, Claude, VS Code, and any OpenAI compatible LLM.
YaraFlux
threatflux/yaraflux
A yara based MCP Server
pattern-mcp
donaldrichard19-LVD/pattern-mcp
Pattern checks a coding agent's UI decisions against your own design system before it builds, whether that lives in code or in Figma. It helps the agent reuse what the product already has and build only what is actually missing. An opt-in enforcement boundary can make that check required, and every
Marlo
KarthikSubramanian07/Marlo
Fixes accessibility violations and proves it. Multi-engine WCAG detection routed by measured accuracy, verified minimal-diff repairs, and a published error rate.
IDA
jtsylve/ida-mcp
A headless MCP server for IDA Pro and Ghidra
Ripgrep
mcollina/mcp-ripgrep
An MCP server to wrap ripgrep
GreptimeDB
greptimeteam/greptimedb-mcp-server
A Model Context Protocol (MCP) server for GreptimeDB
vault-cortex
aliasunder/vault-cortex
Standalone MCP server for Obsidian vaults — hybrid search, structured memory, task management, files, OAuth 2.1. Run locally, self-host, or one-click deploy for remote access.
corpus
ryanjdillon/corpus
Semantic search and structured query over your own content
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?