MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/7
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
145–168 of 1,620 · ranked by trust score, then stars
Bocha Search
bochaai/bocha-search-mcp
Bocha Search MCP Server.
Quick-Start Auto
teddynote-lab/mcp-usecase
unsnooze
saaranshM/unsnooze
Automatically resume Claude Code, Codex CLI, Grok, Qwen Code, Kimi CLI, OpenCode, and Antigravity sessions when 5-hour or weekly usage limits reset—across tmux, Zellij, VS Code, and desktop apps.
Claude Historian
vvkmnn/claude-historian-mcp
📜 An MCP server for conversation history search and retrieval in Claude Code
Historian
vvkmnn/claude-historian
📜 An MCP server for conversation history search and retrieval in Claude Code
Korea Stock
jjlabsio/korea-stock-mcp
MCP Server for Korean stock analysis. 한국 주식 분석을 위한 MCP 서버입니다.
Shodan
burtthecoder/mcp-shodan
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.
Langfuse Prompts
langfuse/mcp-server-langfuse
Model Context Protocol (MCP) Server for Langfuse Prompt Management. This server allows you to access and manage your Langfuse prompts through the Model Context Protocol.
Search1API
fatwang2/search1api-mcp
Official Search1API MCP server for web search, news, crawling, sitemaps, and trends—hosted with OAuth 2.1 or local via npm.
Simple PubMed
andybrandt/mcp-simple-pubmed
MCP server for searching and querying PubMed medical papers/research database
MLIT Data Platform
mlit-data-platform/mlit-dpf-mcp
Serper Search and Scrape
marcopesani/mcp-server-serper
Serper MCP Server supporting search and webpage scraping
serper-search-scrape-mcp-server
marcopesani/mcp-server-serper
Serper MCP Server supporting search and webpage scraping
Content Summarizer
0xshellming/mcp-summarizer
MCP Server for AI Summarization
Semantic Scholar
yuzongmin/semantic-scholar-fastmcp-mcp-server
A FastMCP server implementation for the Semantic Scholar API, providing comprehensive access to academic paper data, author information, and citation networks.
Zotero Connector
kaliaboi/mcp-zotero
A connector for Claude Desktop to work with collection and sources on your Zotero Cloud.
Example
alejandro-ao/mcp-server-example
A simple MCP server to search for documentation (tutorial)
Game Asset Generator
mubarakhalketbi/game-asset-mcp
An MCP server for creating 2D/3D game assets from text using Hugging Face AI models.
Read Website Fast
just-every/mcp-read-website-fast
Quickly reads webpages and converts to markdown for fast, token efficient web scraping
Zotero
kujenga/zotero-mcp
Lightweight Model Context Protocol (MCP) server for the Zotero API, in Python
PostgreSQL Operations
call518/mcp-postgresql-ops
🐘 Give AI assistants full PostgreSQL DBA superpowers — 30+ tools for performance analysis, bloat detection, lock/deadlock monitoring, autovacuum & schema inspection. No extensions required. PG 12-18.
Calculator
githejie/mcp-server-calculator
A Model Context Protocol server for calculating.
MySearch
skernelx/mysearch-proxy
Unified search MCP, proxy console, and skill for Tavily, Firecrawl, and Social / X.
Quickchart
gongrzhe/quickchart-mcp-server
A Model Context Protocol server for generating charts using QuickChart.io . It allows you to create various types of charts through MCP tools.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?