MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/8
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
169–192 of 1,620 · ranked by trust score, then stars
Claudit
marchev/claudit
MCP server for searching Solodit smart contract security findings
Fetch
egoist/fetch-mcp
An MCP server for fetching URLs / Youtube video transcript.
Website Downloader
pskill9/website-downloader
MCP server to download entire websites
Crawl4AI
weidwonder/crawl4ai-mcp-server
用于提供给本地开发者的 LLM的高效互联网搜索&内容获取的MCP Server, 节省你的token
Open Data
opendatamcp/opendatamcp
Connect any Open Data to any LLM with Model Context Protocol.
Agentdocs
gobinfan/python-mcp-server-client
支持查询主流agent框架技术文档的MCP server(支持stdio和sse两种传输协议), 支持 langchain、llama-index、autogen、agno、openai-agents-sdk、mcp-doc、camel-ai 和 crew-ai
Ask Human
masony817/ask-human-mcp
Hayhooks
deepset-ai/hayhooks
Easily deploy Haystack pipelines as REST APIs and MCP Tools.
FFmpeg
video-creator/ffmpeg-mcp
Using ffmpeg command line to achieve an mcp server, can be very convenient, through the dialogue to achieve the local video search, tailoring, stitching, playback,clip, overlay, concat and other functions
Readwise
readwiseio/readwise-mcp
Readwise MCP
VirusTotal
burtthecoder/mcp-virustotal
MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.
Ynab
calebl/ynab-mcp-server
Model Context Protocol for YNAB (you need a budget)
CodeQL
jordyzomer/codeql-mcp
This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor.sh/) or AI agents to interact with CodeQL through structured commands.
Arxiv Latex
takashiishida/arxiv-latex-mcp
MCP server that uses arxiv-to-prompt to fetch and process arXiv LaTeX sources for precise interpretation of mathematical expressions in scientific papers.
Datagov Israel
aviveldan/datagov-mcp
MCP server for Israel Government Data
Polymarket
berlinbra/polymarket-mcp
MCP Server for PolyMarket API
OneSearch
yokingma/one-search-mcp
🚀 OneSearch MCP Server: Web Search & Scraper & Extract, Support agent-browser, SearXNG, Tavily, DuckDuckGo, Bing, etc.
Datadog
winor30/mcp-server-datadog
Tailscale
hexsleeves/tailscale-mcp
server that provides seamless integration with Tailscale's CLI commands and REST API, enabling automated network management and monitoring through a standardized interface
Webflow
webflow/mcp-server
Model Context Protocol (MCP) server for the Webflow Data API.
Stock Trade Finance API
jesusrs1/stock-trade-finance-api
Stock Trade MCP server in Tiingo with stock prices, news, forex, and fundamentals programmatically via the MCP
Gitingest
puravparab/gitingest-mcp
mcp server for gitingest
Web Scout
pinkpixel-dev/web-scout-mcp
An MCP server providing web search and content extraction capabilities. Integrates DuckDuckGo search functionality and URL content extraction into your MCP environment, enabling AI assistants to search the web and extract webpage content.
AgentRPC
agentrpc/agentrpc
A universal RPC layer for AI agents. Connect to any function, any language, any framework, in minutes.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?