MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/61
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,441–1,464 of 1,620 · ranked by trust score, then stars
footprintjs
footprintjs/footPrint
The flowchart pattern for backend code — self-explainable systems that AI can reason about. Causal traces, auto-generated tool descriptions, transactional state.
triumvirate
michaeljboscia/triumvirate
Five AI agents. One coordination layer. No relay server. Plus a trust layer that checks whether the review actually happened.
tool-control-plane
Abhishek-chohan/tool-control-plane
The unglamorous half of agent tooling: a gRPC control plane for sessions, machines, fenced writes, and capability-scoped keys. HTTP and MCP gateways; Python, TypeScript, and Go SDKs.
ThinkWatch
thinkwatchproject/thinkwatch
Enterprise AI bastion host for secure AI API and MCP access, with unified proxying, RBAC, audit logs, rate limiting, and cost tracking across OpenAI, Anthropic, Gemini, and self-hosted LLMs.
Context
neuledge/context
Local-first documentation for AI agents
ue-mcp
db-lyon/ue-mcp
Complete Unreal Engine development toolkit exposed as MCP tools.
Task Orchestrator
jpicklyk/task-orchestrator
Server-enforced workflow discipline for AI agents. An MCP server providing persistent work items, dependency graphs, quality gates, and actor attribution. Schemas define what agents must produce — the server blocks the call if they don't. Works with any MCP-compatible client.
Context Lattice
sheawinkler/contextlattice
The local-first intelligence layer that gives AI agents durable continuity, explainable retrieval, portable context, and verified learning across harnesses.
Linear Streamable
iceener/linear-streamable-mcp-server
MCP Server for interacting with Linear API. Written in TypeScript, Node and Hono.dev
Globalping
jsdelivr/globalping-mcp-server
Remote MCP server that gives LLMs access to run network commands
Dense-Mem
markhuangai/dense-mem
Self-hosted AI agent memory server with MCP, evidence provenance, typed claims, conflict detection, embeddings, recall, PostgreSQL, and pgvector
agentdeals
robhunter/agentdeals
Catalogue of developer infrastructure free tiers, startup credits and pricing, with side-by-side vendor comparisons for hosting, databases and AI APIs. Website, JSON API and MCP server, read by coding agents choosing a stack.
typesafe-mcp
MarkChu-git/typesafe-mcp
MCP server for TypeSafe AI's Jev: typed yes/no, choice and score answers with act / review / abstain gating.
robopartpicker
brainbook0/robopartpicker
Open robotics project discovery, bill-of-materials compilation and parts sourcing. Source-linked, evidence-first, live at robopartpicker.com.
Reactuse
childrentime/reactuse
115+ production-ready React Hooks for sensors, UI, state & browser APIs. Tree-shakable, SSR-safe, TypeScript-first. Used by Shopee, PDD & Ctrip. Inspired by VueUse.
Get Gather
mcp-getgather/mcp-getgather
Exoskeleton for autonomous assistant
Aiquila
elgorro/aiquila
Private AI for your Nextcloud — an MCP server (316 tools), a native Nextcloud app with chat and Coworkers, and one-command Hetzner deployment.
Glaux
cetusk/Glaux
A Lightweight DAW for Making Music with AI
CareLoop-AI
workatustadarshajay/CareLoop-AI
The foundation flow accepts a doctor's note, uses a Gemini tool-calling agent to save each actionable item as a card in Postgres, and displays all saved cards in the frontend.
Terravision
patrickchugh/terravision
Professional cloud architecture diagrams with official AWS, Azure and GCP icons, from Terraform code or a plain JSON graph. MCP server + agent skill.
elementor-mcp
msrbuilds/elementor-mcp
WordPress plugin that turns Elementor & WordPress into an MCP server. 500+ AI-ready tools for building, editing, and managing page designs programmatically.
Pepper
skwallace36/pepper
iOS dynamic library MCP for agents
Lilbee
tobocop2/lilbee
The whole local AI stack in one executable: it runs and manages local AI models across every GPU, and it's a search engine you can talk to, with cited answers from your files, code, and the web. MCP server for coding agents, web crawler, TUI, CLI, REST API, Python library. No Ollama or LM Studio nee
Knowledge Base
jeanibarz/knowledge-base-mcp-server
This MCP server provides tools for listing and retrieving content from different knowledge bases.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?