MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/59
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,393–1,416 of 1,620 · ranked by trust score, then stars
Keryx
actionhero/keryx
Keryx: The Fullstack TypeScript Framework for MCP and APIs
Kindex
jmcentire/kindex
Knowledge index that learns from your conversations
memtomem-stm
memtomem/memtomem-stm
Short-term memory proxy gateway with proactive memory surfacing for AI agents
WebPieces TypeScript
deanhiller/webpieces-ts
obsidian-llm-wiki
Statutecontempt951/obsidian-llm-wiki
Convert your Obsidian markdown vault into a six-persona MCP team for local LLM tools to provide cited, accurate insights.
vetagent
jakegu1/vetagent
VetAgent — token risk intelligence MCP for AI agents. Cloudflare Worker deployment. Assess token risk (liquidity/honeypot/rug) and return actionable low/medium/high verdict. Remote MCP at https://vetagent.dev/mcp.
Kuvasz
kuvasz-uptime/kuvasz
Kuvasz (pronounce as [ˈkuvɒs]) is an open-source uptime and SSL monitoring service, with multiple notification channels, status pages, IAC support via YAML, Prometheus integration, a complete REST API and many more!
Salesforce
salesforcecli/mcp
MCP Server for interacting with Salesforce instances
U.S. Census Bureau Data API
uscensusbureau/us-census-bureau-data-api-mcp
The U.S. Census Bureau Data API MCP connects AI Assistants with official Census Bureau statistics.
AI Agents Orchestrator
hoangsonww/ai-agents-orchestrator
Intelligent orchestration system that coordinates multiple AI coding assistants (Claude, Codex, Gemini CLI, Copilot CLI) to collaborate on complex software development tasks via REPL or a Vue/Nuxt UI dashboard. Also includes an Agentic Team runtime with role-based multi-agent open communication & le
Ctxo
alperhankendi/ctxo
MCP server for AI coding agents. Instead of reading files one by one, your agent gets dependency graphs, git intent, blast radius, and change health in a single call. Works with any language deep analysis for TypeScript,Java, Go, and C#.
Mcp Logic
angrysky56/mcp-logic
Fully functional AI Logic Calculator utilizing Prover9/Mace4 via Python based Model Context Protocol (MCP-Server)- tool for Windows, Linux, Claude App etc
Congress
amurshak/congressmcp
An MCP server allowing AI agents and MCP clients to interface with the Congress.gov API
openswissdata
cammac-creator/openswissdata
Swiss federal reference data for AI agents: customs tariff (TARES), FINMA register and warnings list, NOGA/NACE/ISIC crosswalks. Free MCP server, no key. Signed dataset files.
bagel
Extelligence-ai/bagel
Query robotics, drone, and IoT data in plain English through an MCP server, with an intelligent edge data reduction pipeline that keeps only the data that matters.
HomeButler
higangssh/homebutler
🏠 Tells you what changed on your server — only what's worth telling. Single Go binary, no database, nothing running on the machines it watches. MCP server built in.
Cynical Sally
w1ckedxt/cynical-sally
Brutally honest senior-engineer code reviews for Claude Code, Cursor & Windsurf - and your terminal. Scores, evidence-backed issues, usable fixes.
TAM
gvaibhav/tam-mcp-server
A comprehensive Model Context Protocol (MCP) server for market sizing analysis, TAM/SAM calculations, and industry research. Built with TypeScript, Express.js, and following the MCP specification.
Comfy Cozy
josephoibrahim/comfy-cozy
Say 'dreamier' and your ComfyUI workflow shifts — instantly, reversibly. An AI co-pilot for VFX artists: zero-LLM recipes (dreamier/sharper/faster), 133 MCP tools, EXR-aware vision, workflow.lock provenance, full undo, native sidebar, 5 swappable brains (Claude, GPT, Gemini, Ollama, Nemotron).
mcp-web-validator
AKzar1el/mcp-web-validator
W3C HTML/CSS Validator and Technical SEO Audit MCP Server. Part of the DigestSEO (https://digestseo.com) suite.
skgate
helv-io/skgate
Any MCP server. Anywhere. An OAuth-protected MCP gateway that can also run the servers, plus SI provider proxying with model aliases, and your Grok subscription as an OpenAI-compatible API with no API key.
agenda-intelligence-md
vassiliylakhonin/agenda-intelligence-md
Deterministic evidence-packet checks for AI-generated claims: references, quotes, numbers, and support gaps. CLI, Python, MCP, and review adapters.
dead-letter
BigCactusLabs/dead-letter
Convert .eml email exports to Markdown with YAML front matter
gatherthread
TH060419/gatherthread
GatherThread 共序:本地 AI 编程 Agent 多人联机协作、实时共享上下文。Self-hostable collaboration for local AI coding agents, Codex Desktop connector & DeepSeek Harness plugin.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?