MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/9
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
193–216 of 1,620 · ranked by trust score, then stars
Local Rag
nkapila6/mcp-local-rag
"primitive" RAG-like web search model context protocol (MCP) server that runs locally. ✨ no APIs ✨
SysPlant
x42en/sysplant
Your Windows syscall hooking factory - feat Canterlot's Gate - All accessible over MCP
Montano
lucasmontano/mcp-montano-server
Simple MCP Server Implementation
Workspace
answerlink/mcp-workspace-server
🚀 Beyond Filesystem - Complete AI Development Environment - One MCP Server provides full Agent capability stack: web development, code execution, data processing, image generation. No need for multiple tools, configure once. Perfect support for Dify, FastGPT, Cherry Studio. 文件操作、Python/Node.js
Laravel Loop
kirschbaum-development/laravel-loop
Laravel Loop is a powerful Model Context Protocol (MCP) server designed specifically for Laravel applications. It connects your Laravel application with AI assistants using the MCP protocol.
Apple Notes
sirmews/apple-notes-mcp
Read your Apple Notes with Claude Model Context Protocol
SearxNG Connector
secretiveshell/mcp-searxng
MCP server for connecting agentic systems to search systems via searXNG
Amap
sugarforever/amap-mcp-server
高德地图MCP Server,支持stdio, sse和streamable-http
PubMed
jackkuo666/pubmed-mcp-server
🔍 Enable AI assistants to search, access, and analyze PubMed articles through a simple MCP interface.
Google News
chanmeng666/server-google-news
【Star-crossed coders unite!⭐️】Model Context Protocol (MCP) server implementation providing Google News search capabilities via SerpAPI, with automatic news categorization and multi-language support.
Healthcare
cicatriiz/healthcare-mcp-public
A Model Context Protocol (MCP) server providing AI assistants with access to healthcare data and medical information tools, including FDA drug info, PubMed, medRxiv, NCBI Bookshelf, clinical trials, ICD-10, DICOM metadata, and a medical calculator.
Z-Image Studio
iconben/z-image-studio
A Cli, a webUI, and a MCP server for the Z-Image-Turbo text-to-image generation model (Tongyi-MAI/Z-Image-Turbo base model as well as quantized models)
Augments
augmnt/augments-mcp-server
Comprehensive MCP server providing real-time framework documentation access for Claude Code with intelligent caching, multi-source integration, and context-aware assistance.
MultiCAD
ancode666/multicad-mcp
MCP server for use CAD software through AI assistants like Claude for Desktop or Cursor
AWS Cost Explorer
aarora79/aws-cost-explorer-mcp-server
MCP server for understanding AWS spend
Skene
skenetechnologies/skene
Product-Led Growth (PLG) analysis toolkit that detects tech stacks, plans growth loops and builds the loop iteratively.
Think Tool
philliprt/think-mcp-server
Claude Code Enhanced
grahama1970/claude-code-mcp-enhanced
Enhanced Claude Code MCP server with orchestration capabilities, reliability improvements, and self-contained execution patterns
Reaper
dschuler36/reaper-mcp-server
An MCP Server for interacting with Reaper projects.
Codemode
jx-codes/codemode-mcp
An implementation of the Codemode workflow detailed by Cloudflare.
Fred
stefanoamorelli/fred-mcp-server
Open-source FRED MCP Server (Federal Reserve Economic Data)
Ai Image Gen
mikeyny/ai-image-gen-mcp
Svelte Docs
spences10/mcp-svelte-docs
🔍 MCP server that lets you search and access Svelte documentation with built-in caching
PubMed
grll/pubmedmcp
A MCP server for PubMed data
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?