MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/68
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1,609–1,620 of 1,620 · ranked by trust score, then stars
security-gate-x402
nohosa001-pixel/security-gate-x402
The Zero-Trust Safety & Settlement Rail for Autonomous AI Agents. Sub-10ms deterministic guardrails, key leak defense, and cryptographic Proof-of-Safety attestations via x402 on Base ($0.002).
video-research-mcp
Galbaz1/video-research-mcp
MCP tools and Claude Code workflows for video analysis, cited research, document extraction, knowledge storage, and optional explainer video production.
mscodebase-intelligence
ManSio/mscodebase-intelligence
Intelligent codebase search & indexing for Zed. Async MCP server featuring LanceDB/BM25 hybrid search, multi-bucket RAG, and autonomous self-healing workflows. High-performance, memory-safe, and ready for your production code.
Whodb
clidey/whodb
Where data access meets operational intelligence
javis-os
blogminhquy/javis-os
Unraid
dinglebear-ai/unraid-mcp
Query, monitor, and manage Unraid servers via GraphQL API through MCP tools. Supports system info, Docker, VMs, array/parity, notifications, plugins, rclone, and live telemetry.
Unraid
dinglebear-ai/unraid
Query, monitor, and manage Unraid servers via GraphQL API through MCP tools. Supports system info, Docker, VMs, array/parity, notifications, plugins, rclone, and live telemetry.
Unraid
jmagar/unraid-mcp
Query, monitor, and manage Unraid servers via GraphQL API through MCP tools. Supports system info, Docker, VMs, array/parity, notifications, plugins, rclone, and live telemetry.
VibeShell
veithly/vibeshell
Local-first SSH/SFTP workspace for humans and coding agents: visible operations, shared sessions, integrated files and discoverable plugins.
exceptd Security
blamejs/exceptd-skills
AI security skills grounded in mid-2026 threat reality, not stale framework documentation
great-cto
avelikiy/great_cto
You already have the agent. This is everything around it. great_cto runs Claude Code as a pipeline of 70 specialist agents — an independent model checks each stage before the next builds on it, spending caps refuse rather than warn, and three decisions stay yours: what gets built, how, and whether i
bv-mcp
MadaBurns/bv-mcp
Open-source DNS & email security scanner. One MCP endpoint, 57 checks, zero install. Cloudflare Workers.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?