MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/9

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

193–216 of 1,620 · ranked by trust score, then stars

Local Rag

nkapila6/mcp-local-rag

✓SAFE B

"primitive" RAG-like web search model context protocol (MCP) server that runs locally. ✨ no APIs ✨

★ 1345 read

SysPlant

x42en/sysplant

✓SAFE B

Your Windows syscall hooking factory - feat Canterlot's Gate - All accessible over MCP

★ 1349 readstreamable-http

Montano

lucasmontano/mcp-montano-server

✓SAFE B

Simple MCP Server Implementation

★ 1331 readsse

Workspace

answerlink/mcp-workspace-server

!CAUTION B

🚀 Beyond Filesystem - Complete AI Development Environment - One MCP Server provides full Agent capability stack: web development, code execution, data processing, image generation. No need for multiple tools, configure once. Perfect support for Dify, FastGPT, Cherry Studio. 文件操作、Python/Node.js

★ 1331 readsse

Laravel Loop

kirschbaum-development/laravel-loop

✓SAFE B

Laravel Loop is a powerful Model Context Protocol (MCP) server designed specifically for Laravel applications. It connects your Laravel application with AI assistants using the MCP protocol.

★ 1321 readstreamable-http

Apple Notes

sirmews/apple-notes-mcp

✓SAFE B

Read your Apple Notes with Claude Model Context Protocol

★ 1313 readstdio

SearxNG Connector

secretiveshell/mcp-searxng

✓SAFE B

MCP server for connecting agentic systems to search systems via searXNG

★ 1311 readstdio

Amap

sugarforever/amap-mcp-server

✓SAFE B

高德地图MCP Server,支持stdio, sse和streamable-http

★ 13016 readstreamable-http

PubMed

jackkuo666/pubmed-mcp-server

✓SAFE B

🔍 Enable AI assistants to search, access, and analyze PubMed articles through a simple MCP interface.

★ 1304 readstdio

Google News

chanmeng666/server-google-news

✓SAFE B

【Star-crossed coders unite!⭐️】Model Context Protocol (MCP) server implementation providing Google News search capabilities via SerpAPI, with automatic news categorization and multi-language support.

★ 1291 readstdio

Healthcare

cicatriiz/healthcare-mcp-public

✓SAFE B

A Model Context Protocol (MCP) server providing AI assistants with access to healthcare data and medical information tools, including FDA drug info, PubMed, medRxiv, NCBI Bookshelf, clinical trials, ICD-10, DICOM metadata, and a medical calculator.

★ 12911 readstdio

Z-Image Studio

iconben/z-image-studio

✓SAFE B

A Cli, a webUI, and a MCP server for the Z-Image-Turbo text-to-image generation model (Tongyi-MAI/Z-Image-Turbo base model as well as quantized models)

★ 1292 readsse

Augments

augmnt/augments-mcp-server

✓SAFE B

Comprehensive MCP server providing real-time framework documentation access for Claude Code with intelligent caching, multi-source integration, and context-aware assistance.

★ 1288 readstdio

MultiCAD

ancode666/multicad-mcp

✓SAFE B

MCP server for use CAD software through AI assistants like Claude for Desktop or Cursor

★ 1271 readstdio

AWS Cost Explorer

aarora79/aws-cost-explorer-mcp-server

✓SAFE B

MCP server for understanding AWS spend

★ 1263 read

Skene

skenetechnologies/skene

✓SAFE B

Product-Led Growth (PLG) analysis toolkit that detects tech stacks, plans growth loops and builds the loop iteratively.

★ 1263 read

Think Tool

philliprt/think-mcp-server

✓SAFE B
★ 1261 read

Claude Code Enhanced

grahama1970/claude-code-mcp-enhanced

✓SAFE B

Enhanced Claude Code MCP server with orchestration capabilities, reliability improvements, and self-contained execution patterns

★ 1253 readstdio

Reaper

dschuler36/reaper-mcp-server

✓SAFE B

An MCP Server for interacting with Reaper projects.

★ 1254 readstdio

Codemode

jx-codes/codemode-mcp

✓SAFE B

An implementation of the Codemode workflow detailed by Cloudflare.

★ 1242 readstdio

Fred

stefanoamorelli/fred-mcp-server

✓SAFE B

Open-source FRED MCP Server (Federal Reserve Economic Data)

★ 1243 readstdio

Ai Image Gen

mikeyny/ai-image-gen-mcp

✓SAFE B
★ 1231 readstdio

Svelte Docs

spences10/mcp-svelte-docs

✓SAFE B

🔍 MCP server that lets you search and access Svelte documentation with built-in caching

★ 1231 read

PubMed

grll/pubmedmcp

✓SAFE B

A MCP server for PubMed data

★ 1221 read

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.