MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/62

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

1,465–1,488 of 1,620 · ranked by trust score, then stars

Tree-sitter Analyzer

aimasteracc/tree-sitter-analyzer

✕BLOCK F

Cross-language-safe code-intelligence MCP for AI agents: 13 languages, family-gated call graph, blast radius, health grading, 8 facade tools, JSON envelopes, 100% local. Run miswire-audit on your repo.

★ 543 readstdio

NeuronDB

neurondb/neurondb

✕BLOCK F

NeuronDB PostgreSQL extension: vector similarity search (HNSW, IVFFlat), embeddings, kNN, ML in SQL, and hybrid full-text + vector retrieval.

★ 511 read

Open Code Review

raye-deng/open-code-review

✕BLOCK F

🤖 AI code quality gate for AI-generated code. Detects hallucinated packages, phantom dependencies, stale APIs, and more. MCP Server + CLI + CI/CD Action.

★ 404 readstdio

GroundTruth-MCP

rm-rf-prod/GroundTruth-MCP

✕BLOCK F

Self-hosted MCP server for live documentation, code audits, and best practices. 793+ curated libraries, 107 audit patterns, no rate limits.

★ 633 readstdio

hronaut

hronaut/hronaut

✕BLOCK F

The browser your coding agent can come back to — visible, persistent, isolated workspaces over MCP.

★ 618 readstdio

celeste-cli

whykusanagi/celeste-cli

✕BLOCK F

Agentic terminal AI assistant with a Bubble Tea TUI, code-graph review, semantic search, multi-provider LLMs, and MCP tools.

★ 12 readstreamable-http

MCPGateway

yeelam-gordon/MCPGateway

✕BLOCK F

Share local MCP servers across coding-agent sessions: avoid duplicate backend memory and startup work. Keep the agent-side MCP connection across settled configuration-only restarts (SDK/stdio). Tool discovery and exclusive workflows; sharing adds overhead.

★ 013 readstdio

CodeGraphContext

shashankss1205/codegraphcontext

✕BLOCK F

An MCP server plus a CLI tool that indexes local code into a graph database to provide context to AI assistants.

★ 4,24210 read

Crw

us/crw

✕BLOCK F

Fast, lightweight Firecrawl/Tavily alternative in Rust. Web scraper, crawler & search API with MCP server for AI agents. Drop-in Firecrawl-compatible API (/scrape, /crawl, /search). 2.3x faster than Tavily, 1.5x faster than Firecrawl in 1K-URL benchmarks. 6 MB RAM, single binary. Self-host or use ma

★ 1,0841 readstdio

CKB

simplyliz/ckb

✕BLOCK F

Code intelligence for AI assistants - MCP server, CLI, and HTTP API with symbol navigation, impact analysis, and architecture mapping

★ 1107 readstdio

CKB

simplyliz/codemcp

✕BLOCK F

Code intelligence for AI assistants - MCP server, CLI, and HTTP API with symbol navigation, impact analysis, and architecture mapping

★ 1107 readstdio

Shinkai

dcspark/shinkai-local-ai-agents

✕BLOCK F

Shinkai is a two click install App that allows you to create Local AI agents in 5 minutes or less using a simple UI. Supports: MCPs, Remote and Local AI, Crypto and Payments.

★ 4335 read

Shinkai

dcspark/shinkai-apps

✕BLOCK F

Shinkai is a two click install App that allows you to create Local AI agents in 5 minutes or less using a simple UI. Supports: MCPs, Remote and Local AI, Crypto and Payments.

★ 4335 read

Rails AI Context

crisnahine/rails-ai-context

✕BLOCK F

45 MCP tools that give AI coding agents ground truth about your Rails app: schema, models, routes, controllers, views, jobs, conventions. Works with Claude Code, Cursor, GitHub Copilot, OpenCode and Codex CLI. MCP or CLI, in-Gemfile or standalone, and it still answers when the app can't boot.

★ 1592 readstdio

React Native AI Debugger

igorzheludkov/react-native-ai-debugger

✕BLOCK F

Gives AI agents eyes and hands into running React Native apps: logs, REPL, tap, screenshots

★ 784 readstdio

react-native-ai-devtools

igorzheludkov/execbro

✕BLOCK F

Gives AI agents eyes and hands into running React Native apps: logs, REPL, tap, screenshots

★ 784 readstdio

european-parliament-mcp-server

Hack23/European-Parliament-MCP-Server

✕BLOCK F

European Parliament MCP Server - Political intelligence for AI agents

★ 2859 readstdio

ai-appsec

subodhkc/ai-appsec

✕BLOCK F

Evidence-backed AppSec for AI applications and agents. Powered by HAIEC.

★ 41 readstdio

kenny

nullthrone/kenny

✕BLOCK F

Self-hosted remote administration and fleet monitoring for Windows PCs in a family setting, operated through Claude (MCP) and a web dashboard.

★ 13 readstreamable-http

sigelo

csigelo/sigelo

✕BLOCK F

Portable, offline-verifiable identity for AI agents: Ed25519 DIDs, signed attestations any world checks without a server, a Monero keeper that holds the money so the agent never does. Draft, wire sigelo/0.

★ 02 readstdio

Peekaboo 🫣 — Mac automation that sees the screen and does t

openclaw/Peekaboo

✕BLOCK F

Peekaboo is a macOS CLI & optional MCP server that enables AI agents to capture screenshots of applications, or the entire system, with optional visual question answering through local or remote AI models.

★ 5,2851 read

Pdf Reader Mcp

sylphlab/pdf-reader-mcp

✕BLOCK F

Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.

★ 1,0351 readstdio

Anymd

SylphxAI/anymd

✕BLOCK F

Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.

★ 1,0351 readstdio

PDF Reader

sylphxltd/pdf-reader-mcp

✕BLOCK F

Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.

★ 1,0201 readstdio

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.