MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/65
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,537–1,560 of 1,620 · ranked by trust score, then stars
Kybernesis Platform
KybernesisAI/platform
lense
adeelahmad/lense
Lens: intelligence for your agent. Safe, secure and cost-effective. A self-hosted, cited knowledge graph and MCP server for your agents, from a Raspberry Pi to the cloud.
Chrome Browser
hangwin/mcp-chrome
Chrome MCP Server is a Chrome extension-based Model Context Protocol (MCP) server that exposes your Chrome browser functionality to AI assistants like Claude, enabling complex browser automation, content analysis, and semantic search.
kubernetes-mcp-server
containers/kubernetes-mcp-server
Model Context Protocol (MCP) server for Kubernetes and OpenShift
codflow
bighadj22/codflow
The open-source, COD-first e-commerce + delivery platform for Algeria built agentic-ready.
Sage
l33tdawg/sage
(S)AGE - (Sovereign) Agent Governed Experience
Axon
ali-kamali/axon.mcp.server
Transform your codebase into an intelligent knowledge base for AI-powered development with Cursor IDE, Google AntiGravity, and MCP-enabled assistants
deepPairing
mitchjablonski/deepPairing
Review what Claude Code is about to change on a rich visual surface — inline comments, evidence, and a gate that remembers the approaches you rejected.
living-bread-mcp
thegoodfruit/living-bread-mcp
Remote MCP server for The Living Bread: Scripture from a stored text, verses for a need, real churches and gatherings, and the prayers real people prayed over you. mcp.living-bread.org
cli
modelstudioai/cli
Official Model Studio CLI(阿里云百炼 CLI)built for AI Agent frameworks, exposing models, search, multimodal, and workflow capabilities as structured tool calls.
AI-Canvas-tauri
Tenney95/AI-Canvas-tauri
Local-first AI canvas for visual workflows, AI short drama, image/video generation, storyboarding and asset management. ComfyUI, AI agents, MCP & Blender. 本地优先 AI 画布:AI短剧、AI资产管理、图像/视频生成、分镜制作与视频剪辑。
DeepSecure
deeptrail/deepsecure
Effortlessly secure your AI agents and AI-powered workflows — from prototype to production. Get easy-to-use identity, credential, and access management built for fast-moving AI developers.
Rash
paiml/bashrs
Bashrs: Rust-to-Shell Transpiler for Deterministic Bootstrap Scripts
puenteo
mano7onam/puenteo
Let your coding agents talk to each other: search every Claude Code / Codex / Gemini / Cursor session and message live sessions. CLI · MCP · hooks · HTTP/SSE · A2A.
Reactive Resume
amruthpillai/reactive-resume
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
Reactive Resume
reactive-resume/app
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
Reactive Resume
reactive-resume/reactive-resume
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
Sentry
getsentry/sentry-mcp
An MCP server for interacting with Sentry via LLMs.
Novamira
use-novamira/novamira
MCP server that gives AI agents full access to WordPress through PHP execution and filesystem operations
Flyto Core
flytohub/flyto-core
AI said it finished. Flyto2 shows the proof.
LLM Council
amiable-dev/llm-council
The LLM Council works together to answer your hardest questions
mnema
felipesauer/mnema
Signed, append-only decision records for AI coding agents: an MCP server and CLI that open Claude Code, Codex, Copilot CLI, Gemini CLI, OpenCode, VS Code and Cursor sessions with your team's decisions, hold the edits a rule governs, and let anyone verify the record offline. Tamper-evident, in git.
Conarium
dogrucanemek-alt/conarium
Self-hosted governance layer between AI assistants and your real data. Deterministic PII masking, allow/deny policy, hash-chained audit, offline-verifiable Ed25519 receipts per access when a receipt sink is configured, coverage reconciliation against the DB's own query counters to surface gateway by
wrg-sigma-rules
WRG-11/wrg-sigma-rules
Sigma rules for ransomware, threat actors and vulnerabilities disclosed in AI/LLM apps and MCP servers, with multi-backend conversion and an MCP server for Claude Code, Codex and Cursor. CI-pinned claims.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?