MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/60
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,417–1,440 of 1,620 · ranked by trust score, then stars
xgen-dex-cli
PlateerLab/xgen-dex-core
XGEN Dex — 데스크톱 · CLI · VSCode 확장이 하나의 코어를 공유하는 저장소
Hookdeck
hookdeck/hookdeck-cli
CLI for Hookdeck: forward webhooks to localhost (ngrok alternative), manage and query Event Gateway resources (sources, connections, destinations, events), run the MCP server for AI agents. Free for dev.
Russian Marketplace Data
vladimir-human/ru-marketplace-mcp
Одиннадцать маркетплейсов и недвижимость Циан как MCP-серверы: Wildberries, Ozon, Яндекс Маркет, Детский мир, Авито, AliExpress, Taobao, Мегамаркет, Lamoda, DNS, Ситилинк, Циан. Плюс сравнение цен по всем товарным источникам одним вызовом. Только чтение, ключи не нужны.
ru-marketplace-mcp
Vladimir-Human/ru-marketplace-mcp
Одиннадцать маркетплейсов и недвижимость Циан как MCP-серверы: Wildberries, Ozon, Яндекс Маркет, Детский мир, Авито, AliExpress, Taobao, Мегамаркет, Lamoda, DNS, Ситилинк, Циан. Плюс сравнение цен по всем товарным источникам одним вызовом. Только чтение, ключи не нужны.
VibeCraft
amenti-labs/vibecraft
AI-driven vibe based Minecraft building via MCP. Describe a build, watch your agent construct it in Minecraft.
tianshu-mcp
lanlan0811/tianshu-mcp
天枢harness × AI-Agent 编排 MCP server:调度外部 Agent 干活,用运行时证据做客观验收,不通过自动返修闭环。
designesy-org
LE-VAI/designesy-org
Scores any URL against a 44-check design contract (A-F grade), validates DTCG tokens, and checks drift and AI readiness.
tw-market-live-data-intelligence
SmartyJohnway/tw-market-live-data-intelligence
Local-first Taiwan market evidence workbench for AI agents — TWSE/TPEx, persistent Watchlists, governed MCP, auditable evidence, explicit execute-once.
fastCRW
fastcrw/crw
Fast, lightweight Firecrawl/Tavily alternative in Rust. Web scraper, crawler & search API with MCP server for AI agents. Drop-in Firecrawl-compatible API (/scrape, /crawl, /search). 2.3x faster than Tavily, 1.5x faster than Firecrawl in 1K-URL benchmarks. 6 MB RAM, single binary. Self-host or use ma
Unreal Editor
db-lyon/ue-mcp
Complete Unreal Engine development toolkit exposed as MCP tools.
www-project-agent-memory-guard
OWASP/www-project-agent-memory-guard
OWASP Foundation web repository
Reshapr
reshaprio/reshapr
The open source, no-code MCP Server for AI-Native API Access
Gofannon
the-ai-alliance/gofannon
A web app for rapidly prototyping AI agents and the lightweight web UIs that wrap them—build flows, preview interactions, and share agent-driven experiences without lock-in.
Auth Step-by-Step
christian-posta/mcp-auth-step-by-step
Step by step walkthrough of an MCP Authorization implementation
Kollektiv
alexander-zuev/kollektiv-mcp
Kollektiv MCP enables you to chat with and query your own documents directly from IDEs and MCP clients. Private, secure, and integrated into your favorite code editor
proximo
john-broadway/proximo
The Proxmox MCP you can hand the keys. All four products: PVE, PBS, PMG, PDM.
Adaptive Graph Of Thoughts
saptadey/adaptive-graph-of-thoughts-mcp-server
LLM Reasoning Framework for Scientific Research
Inference Gateway CLI
inference-gateway/cli
A Git-first CLI coding agent that turns ideas, issues, and tasks into real code changes. It can run remotely from your mobile phone or automate your computer.
ai-nexus
mosesy5688-cell/ai-nexus
Structured AI-entity discovery, evidence, and identity layer for agents.
Peekaboo
steipete/peekaboo
Peekaboo is a macOS CLI & optional MCP server that enables AI agents to capture screenshots of applications, or the entire system, with optional visual question answering through local or remote AI models.
Xiaozhi ESP32 Server
joey-zhou/xiaozhi-esp32-server-java
小智ESP32的Java企业级管理平台,提供设备监控、音色定制、角色切换和对话记录管理的前后端及服务端一体化解决方案
AgentChat
shy2593666979/agentchat
AgentChat 是一个基于 LLM 的智能体交流平台,内置默认 Agent 并支持用户自定义 Agent。通过多轮对话和任务协作,Agent 可以理解并协助完成复杂任务。项目集成 LangChain、Function Call、MCP 协议、RAG、Memory、HITL、Skill、Milvus 和 ElasticSearch 等技术,实现高效的知识检索与工具调用,使用 FastAPI 构建高性能后端服务。
Search Scrape
devshero/search-scrape
A unified web extraction and stateful automation engine for AI. Replaces heavy testing frameworks with token-optimized browser control, deep research, and HITL.
Curion
geanatz/curion
Curion is a project-local memory layer for AI coding agents, published as an MCP server for Claude Code, Codex, OpenCode, and other MCP clients.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?