MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/6
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
121–144 of 1,620 · ranked by trust score, then stars
XiYan
xgenerationlab/xiyan_mcp_server
A Model Context Protocol (MCP) server that enables natural language queries to databases
Unsplash
hellokaton/unsplash-mcp-server
🔎 A MCP server for Unsplash image search.
unsplash-mcp-server
hellokaton/unsplash-mcp-server
🔎 A MCP server for Unsplash image search.
Find Flights
ravinahp/flights-mcp
An MCP server to search for flights.
Image-Gen
fengin/image-gen-server
一个能与Cursor集成的图片生成mcp server工具,实现调用即梦逆向接口
OpenStreetMap
jagan-shanmugam/open-streetmap-mcp
An OpenStreetMap MCP server implementation that enhances LLM capabilities with location-based services and geospatial data.
Apple Mail
patrickfreyer/apple-mail-mcp
MCP server giving AI assistants full access to Apple Mail - read, search, compose, organize & analyze emails via natural language
MinerU-Ecosystem
opendatalab/mineru-ecosystem
Parse PDFs, images, doc, docx, ppt, pptx, xls, xlsx, html into Markdown using MinerU API.
RepoMapper
pdavis68/repomapper
A tool to produce a map of a codebase within a git repository. Based entirely on the "Repo Map" functionality in Aider.chat
Gibber
anton10xr/gibber-mcp
Tiny MCP server with cryptography tools, sufficient to establish end-to-end encryption between LLM agents
Gibber
antonpk1/gibber-mcp
Tiny MCP server with cryptography tools, sufficient to establish end-to-end encryption between LLM agents
OpenNutrition
deadletterq/mcp-opennutrition
MCP server providing access to the comprehensive OpenNutrition food database with 300,000+ food items, nutritional data, and barcode lookups
Magic UI
magicuidesign/mcp
Magic UI components, searchable and installable from your AI editor.
BaseLayer
zwgnr/baselayer
Re-usable multi part components built on React Aria and TailwindCSS.
Mcp Rb
funwarioisii/mcp-rb
A lightweight Ruby framework for building MCP servers with a Sinatra-like DSL
HotNews
wopal-cn/mcp-hotnews-server
A Model Context Protocol server that provides real-time hot trending topics from major Chinese social platforms and news sites.
Itasca
yusong652/itasca-mcp
MCP server connecting AI agents to ITASCA engines (PFC, FLAC, 3DEC, MPoint, MassFlow) — run geotechnical & geomechanics simulations through natural conversation
PFC
yusong652/pfc-mcp
MCP server connecting AI agents to ITASCA engines (PFC, FLAC, 3DEC, MPoint, MassFlow) — run geotechnical & geomechanics simulations through natural conversation
Claude Patent Creator
robthepcguy/claude-patent-creator
USPTO patent creation system with MCP server + Claude Code plugin. Hybrid RAG search over MPEP/USC/CFR, BigQuery access to 76M+ patents, automated 35 USC 112 compliance checks, prior art search, diagram generation. GPU-accelerated with skills and autonomous agents.
Easy
zcaceres/easy-mcp
Absurdly easy Model Context Protocol Servers in Typescript
eliasbiondo/linkedin-mcp-server
🔗 A Model Context Protocol (MCP) server for LinkedIn — search people, companies, and jobs, scrape profiles, and get structured data via any MCP-compatible AI client.
Toolbox Langchain SDK
googleapis/mcp-toolbox-sdk-python
Python SDK for interacting with the MCP Toolbox for Databases.
Bilibili
huccihuang/bilibili-mcp-server
MCP Server for the Bilibili API, supporting various operations.
Scholarly
adityak74/mcp-scholarly
A MCP server to search for accurate academic articles.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?