MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/66
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,561–1,584 of 1,620 · ranked by trust score, then stars
mistgate
Mistgate/mistgate
Self-hosted panel for running a VPN for others: family, friends, a community or a small team. Hysteria2 and AmneziaWG, one link per person, VLESS REALITY coming. Add servers from the browser over SSH; client-eye health checks and Telegram alerts; MCP for AI agents. Two static Go binaries, SQLite, no
drift
lungenemptynester200/drift
Detect architecture drift in AI-assisted codebases with deterministic checks and clear signals
MCP Toolbox for Databases
googleapis/genai-toolbox
MCP Toolbox for Databases is an open source MCP server for databases.
Kubernetes
manusa/kubernetes-mcp-server
Model Context Protocol (MCP) server for Kubernetes and OpenShift
Kubernetes
containers/kubernetes-mcp-server
Model Context Protocol (MCP) server for Kubernetes and OpenShift
Keeper
ridafkih/keeper.sh
Calendar sync tool & universal calendar MCP server. Aggregate, sync and control calendars on Google, Outlook, Office 365, iCloud, CalDAV or ICS.
Hypa
Hypabolic/Hypa
CodeNib
sysevol-ai/CodeNib
Find source context and trace calls across languages in Claude Code, Codex and other MCP agents.
roboparts
lm203688/roboparts
RoboParts — Vendor-neutral composition checker for embodied systems | 具身系统的组合校验层(开源、厂商中立)| 868 实体 / 20 品类 / ISO 9409-1 法兰判定 / 三态 fail-closed 裁决(能/不能/不知道)| MCP Server + 开放 API + GitHub Action
Mcp Ts Core
cyanheads/mcp-ts-core
Agent-native TypeScript framework for building MCP servers.
Mcp Ts Template
cyanheads/mcp-ts-template
Agent-native TypeScript framework for building MCP servers.
IBM i Server
ibm/ibmi-mcp-server
MCP server for IBM i systems
wenlan
wenlan-app/wenlan
A living personal wiki. Wenlan turns your documents, notes, and AI chats into pages with links to their sources, and updates them as sources change without overwriting your edits. Claude Code, Codex and other AI tools can build on it.
Markdown Vault
pvliesdonk/markdown-vault-mcp
Generic markdown vault MCP with hybrid search
benchweave
madeinoz67/benchweave
BenchWeave is a Python test-bench gateway for embedded systems, combining reusable instrument and DUT plugins, shared device profiles, and safety-aware automated testing using AI.
Rheo
MasterZ1311/Rheo
Sovereign local-first AI voice studio. Neural speech synthesis, zero-shot voice cloning, zero-latency dictation, and MCP agent voice I/O. Built with Tauri & FastAPI.
create-nextblock
nextblock-cms/nextblock
The open-source, full-stack CMS for Next.js 16. An AI-native, developer-first alternative to headless platforms built with React Server Components, Supabase, and Tailwind CSS.
blixtrade
blixvip/blixtrade
Solana memecoin terminal with a public read API and an MCP server: live pump.fun feed, holder ledgers, Jupiter quotes.
obsidian-mcp-server
cyanheads/obsidian-mcp-server
Read, write, search, and surgically edit Obsidian vault notes, tags, and frontmatter via MCP. STDIO or Streamable HTTP.
publisher
malloydata/publisher
Publisher is the open-source analytics engine for Malloy. It lets you define data models once — and use them everywhere.
gina
gina-io/gina
MVC framework for Node.js and Bun with built-in HTTP/2, multi-bundle architecture, and scope-based data isolation — no Express dependency
surreal-memory
acidkill/surreal-memory
MCPOmni Connect
abiorh001/mcp_omni_connect
An agent runtime for Python. Give your agent real work. Keep control: every action checked before it runs, every run survives a crash without silently redoing anything, every step on the record.
Obsidian LLM Wiki
2233admin/obsidian-llm-wiki
Your markdown vault, compiled into a 6-persona MCP team for Claude Code, Codex, OpenCode, and Gemini CLI. Headless-first. Cites, doesn't guess.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?