MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/64
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,513–1,536 of 1,620 · ranked by trust score, then stars
Align CLI
aligndottech/align-cli
Align CLI - capture decisions, check alignment, and query your decision graph from the terminal
datahogo
datahogo/datahogo
Open-source security scanner that runs on your machine — your code never leaves your laptop. 300+ checks for JS/TS, Python, Go, Java, PHP, C#, mobile and Supabase. Plain-language explanations, AI fixes with your own API key.
DataQ
TheurgicDuke771/DataQ
Open-source data quality monitoring: checks across warehouses, lakehouses and object stores, triggered by ADF, Airflow and dbt, with alerting and an MCP server.
flowviant
flowviant/cli
Unstract
zipstack/unstract
LLM-Driven Extraction of Unstructured Data — Built for API Deployments & ETL Pipeline Workflows
graphjin
dosco/graphjin
One governed graph for AI agents — GraphQL + MCP over your databases, files, APIs, and code
Hevy
chrisdoc/hevy-mcp
Manage your Hevy workouts, routines, folders, and exercise templates. Create and update sessions faster, organize plans, and search exercises to build workouts quickly. Stay synced with changes so your training log is always up to date.
hevy-mcp
chrisdoc/hevy-mcp
Manage your Hevy workouts, routines, folders, and exercise templates. Create and update sessions faster, organize plans, and search exercises to build workouts quickly. Stay synced with changes so your training log is always up to date.
ClinicalTrials.gov
cyanheads/clinicaltrialsgov-mcp-server
Search ClinicalTrials.gov trials, retrieve study details and results, and match patients to eligible trials via MCP. STDIO or Streamable HTTP.
Teradata
teradata/teradata-mcp-server
The community development of a MCP server for a Teradata database
Barbacane
barbacane-dev/barbacane
Barbacane API and Bidirectional AI Gateway
hbhqq9-bde-score
hbhqq9/bde-score
🏆 Open-source multi-factor stock scoring API (0-100) | US/HK/A-Share 74 stocks | Zero signup | shields.io badges | GitHub Action | EU AI Act compliant
Trazum
Davmunrey/Trazum
Know what your AI agents cost, per project, without your prompts leaving the machine. CLI, MCP server and CI gate. Zero dependencies, offline.
Synorive
arturoaeriform174/Synorive
Search your files by meaning and fact-check the web, fully offline.
GPT Researcher
assafelovic/gpt-researcher
An autonomous agent that conducts deep research on any data using any LLM providers
Xiaozhi Tools
zhongzitongxue/xiaozhi-mcptools
一个图形化界面的小智MCP服务连接器,包含多种工具! 自动部署服务,方便小白给小智Ai添加MCP工具
Lunchmoney
leafeye/lunchmoney-mcp-server
platform
GCTRL-TECH/platform
Governed graph-native agent memory: knowledge extraction, fusion, hybrid RAG, scoped access tokens. A push for data sovereignty.
eurostat-mcp-server
barrylecherous932/eurostat-mcp-server
Query Eurostat datasets on economy, health, and regional data through the Model Context Protocol using STDIO or HTTP.
EDT-MCP
DitriXNew/EDT-MCP
MCP for 1C:EDT
EDT
ditrixnew/edt-mcp
MCP for 1C:EDT
JSON Server
gongrzhe/json-mcp-server
JSON handling and processing mcp server
crazyrabbitltc/mcp-twitter-server
Model Context Protocol Server for Accessing twitter
artifactflow
Gadsotek/artifactflow
Open-source, self-hosted, versioned vault for AI-generated HTML, Markdown, Mermaid, and image artifacts, with scoped MCP access and isolated two-origin previews.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?