MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/58
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,369–1,392 of 1,620 · ranked by trust score, then stars
xcodebuildmcp
getsentry/XcodeBuildMCP
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
Mobile Build
getsentry/mobilebuildmcp
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
XcodeBuild
cameroncooke/xcodebuildmcp
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
XcodeBuild
getsentry/xcodebuildmcp
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
Transloadit JavaScript/TypeScript SDKs
transloadit/node-sdk
Transloadit's official Node.js SDK
Archive Agent
shredengineer/archive-agent
Find your files with natural language and ask questions.
navvi
fellowship-dev/navvi
Turn a browser task into a reusable scraper.
Nerve
evilsocket/nerve
The Simple Agent Development Kit.
Mcp-get
michaellatman/mcp-get
Archived: mcp-get is no longer maintained.
RagRabbit
madarco/ragrabbit
Open Source, Self-Hosted, AI Search and LLM.txt for your website
Hammer
praetorian-inc/mcphammer
MCP security testing framework for evaluating Model Context Protocol server vulnerabilities
Azure Diagram
dminkovski/azure-diagram-mcp
MCP server that turns natural-language prompts into Microsoft Azure architecture diagrams (PNG) using Python Diagrams + Graphviz.
Deepseek Mcp Server
arikusi/deepseek-mcp-server
MCP server for DeepSeek V4 (v4-flash, v4-pro, 1M context): chat, reasoning, function calling, thinking mode, cost tracking. deepseek-chat/reasoner aliases supported.
mcp-core
n24q02m/mcp-core
Shared foundation for building MCP servers -- Streamable HTTP transport, OAuth 2.1, browser-based credential setup, and a shared embedding daemon.
claude-grok-build-plugin
xzawed/claude-grok-build-plugin
A Claude Code plugin (MCP-server wrapper) that lets Claude delegate coding tasks to xAI's Grok Build CLI — billed via your xAI subscription, not metered API. 9 MCP tools, /grok:* commands.
noted
fabriziosalmi/noted
Desktop app for taking notes in Markdown/HTML, with built-in AI, note links (wikilinks), global search, local history, and Git integration
Jentrix open client
jentrix-au/jentrix
Jentrix open client: the CLI and the official Claude Code and Codex plugins
omneum
cole-h06/omneum
An open-source context evaluator for AI agents.
Transloadit Node.js SDK
transloadit/node-sdk
Transloadit's official Node.js SDK
OmniMesh Gateway
omnimesh-labs/omnimesh-gateway
Model Context Protocol (MCP) Gateway & Registry - Central hub for managing tools, resources, and prompts for MCP-compatible LLMs. Translates REST APIs into MCP, builds virtual MCP servers with security and observability, and bridges multiple transports (stdio, SSE, streamable HTTP).
MCPg
devopam/MCPg
Postgres MCP Server
orbit-vsx
oaslananka/orbit-vsx
VS Code extension for MCP health, debug-session intelligence, and A2A trust workflows: monitor companion services, inspect Agent Cards, enforce workspace trust, and expose bounded tools to agent mode.
dibs
Agenxy/dibs
Keeps your agents in the loop about each other. See what the fleet is doing, then message, sync and send files between agents. Dibs reports; it never acts.
USolver
sdiehl/usolver
A model context protocol server for solving combinatorial optimization problems with logical and numerical constraints.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?