MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/63
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,489–1,512 of 1,620 · ranked by trust score, then stars
PDF Reader
sylphxai/pdf-reader-mcp
Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.
McpStore
ip2a/mcpstore
Elegantly manage your MCP services
pgEdge Postgres
pgedge/pgedge-postgres-mcp
pgEdge MCP Server. A PostgreSQL MCP server with a Natural Language Agent CLI and Web UI.
Swagger Gateway
zaizaizhao/mcp-swagger-server
MCP Swagger Server 将任何符合 OpenAPI/Swagger 规范的 REST API 转换为 Model Context Protocol (MCP) 格式,让 AI 助手能够理解和调用您的 API。
openrod
OpenRod/OpenRod
One-click sandboxes for AI agents, with egress policy, MCPs, skills and audit. Built on NVIDIA OpenShell.
codemcp
mewisme/codemcp
CodeMCP is a workspace-aware execution, context, and agent orchestration server for AI clients.
Tabularis
tabularisdb/tabularis
Open-source desktop SQL workspace with 3 built-in database drivers and 16 shipped plugins, including SQL Server, DuckDB, ClickHouse and Redis. Built-in MCP server for Claude, Cursor and Devin, SQL notebooks and visual EXPLAIN.
Payload CMS
matmax-worldwide/payloadcmsmcp
Payload CMS MCP Server
codelocal
codelocal-cloud/codelocal
The open-source Project Brain for AI coding. Connect ChatGPT, Codex, Claude and MCP-compatible agents to your projects, local tools and persistent knowledge. Fork it, build with it, and help shape the open AI development stack. 🧠⚡
Last.fm MCP Server
rianvdm/lastfm-mcp
An MCP server that provides seamless access to a user's Last.fm listening data and music information via AI assistants like Claude.
Tushare
zhewenzhang/tushare_mcp
api2ai
OpenSourceAGI/dev-tools-starter-agent
💻⚒️ NPM dev tools and core parts for Full Stack Starter App & Docs 🚀DEMO
fluxmail
churichard/fluxmail
Self-hosted email CLI / API / MCP server for AI agents and apps
orcid-mcp-server
cyanheads/orcid-mcp-server
Search and retrieve researcher profiles, works, affiliations, funding, and peer review records from the ORCID registry via MCP. STDIO or Streamable HTTP.
PrepDeck
YIzhongyue/PrepDeck
A self-hosted exam prep platform with practice questions, mock exams, AI-powered explanations, and personalized progress tracking, built on Cloudflare.
teardrop
teardrop-ai/teardrop
An A2A-first marketplace for autonomous economic agents: discover specialists, delegate tasks, and settle per-request blockchain payments over federated MCP tools and streaming AG-UI.
MARM
lyellr88/marm-systems
Local-first 3-in-1 AI memory layer & MCP server for Claude Code, Codex, Grok, Gemini, VS Code and Cursor. Fuses session history, codebase indexing & concept graphs in SQLite. Enables zero-cloud, privacy-first context & instant recall, supports multi-agent swarms.
Reasoner
jacck/mcp-reasoner
A systematic reasoning MCP server implementation for Claude Desktop with beam search and thought evaluation.
SuperLocalMemory
qualixar/superlocalmemory
Open-source governed, local-first memory control plane for AI agents and teams. arXiv:2608.08253
sunpeak
Alignbase/sunpeak
Server-agnostic MCP testing framework and full-stack MCP App framework for ChatGPT Apps, Claude Connectors, and more.
Splunk AI Connector
deslicer/mcp-for-splunk
MCP Server for integrating with Splunk Enterprise
neo-agent-brain
neomjs/neo-agent-brain
Point a cross-model AI engineering team at your own codebases. The Agent OS keeps named AI maintainers' identity, memory and review across labs alive between sessions — the Brain Neo.mjs runs on itself. Multi-tenant: onboarding a codebase is a config entry, not a fork.
RepoTunnel
Yashwanth034/RepoTunnel
RepoTunnel is a secure local AI workspace bridge that connects ChatGPT Web and MCP-compatible AI clients to approved local projects, files, terminals, Git, GitHub, browsers, editors, and desktop applications—so AI can inspect, edit, test, run, and manage real development work without constant copy-p
mantle
aotter/mantle
AotterMantle SDK: agent-native CMS runtime, manifests, admin UI, and Cloudflare adapter.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?