Current time and IANA timezone conversion — the first-party MCP that tells an agent what time it actually is.
time, timezone, clock, iana
Best Read-Only MCPs
Read-only MCPs can inspect, query, and fetch — but they never write, post, or trigger side effects. That makes them the safest option for exploratory agent workflows, production databases, and anywhere a misfire would cost money or corrupt state.
35 MCPs in this collectionFilter:
read-onlyTop Read-Only MCPs ranked
Popularity-ordered. Click any card for install snippets, fact sheet, and trust signals.
Retrieve web pages and convert them to clean markdown.
web, fetch, markdown, scraping
Official
Look up Terraform Registry providers and modules, and manage HCP Terraform workspaces from an AI agent.
terraform, iac, infrastructure-as-code, hashicorp
Query and inspect MongoDB collections from Claude, Cursor, and VS Code.
database, nosql, mongodb, atlas
Up-to-date library docs pulled directly into your AI context.
coding, documentation, libraries, accuracy
Inspect keys, run commands, and debug Redis from an AI agent.
database, cache, redis, valkey
Official
Query ClickHouse and ClickHouse Cloud columnar warehouses from an AI agent.
database, warehouse, clickhouse, olap
Official
Manage Bitbucket Cloud repos, pipelines, and pull requests from an AI agent.
git, bitbucket, atlassian, pipelines
Official
Query Google Ads campaigns, metrics, and account performance with GAQL — Google's official MCP.
google-ads, ads, ppc, marketing
Inspect Figma designs, components, and variables from an agent — the widely adopted community server.
figma, design, design-to-code, components
Official
Search indices, inspect mappings, and run queries against Elasticsearch from an AI agent.
database, search, elasticsearch, elastic
Official
Official Mapbox MCP — geocoding, directions, isochrones, search, and tiles across the Mapbox API surface.
mapbox, maps, geocoding, directions
Triage errors, inspect traces, and query events from Sentry.
sentry, errors, monitoring, observability
Official
Live SERP, keyword, backlink, and on-page SEO data for an AI agent.
seo, serp, keywords, backlinks
Official
Query GA4 reports, funnels, and realtime data from an AI agent.
analytics, ga4, google-analytics, reporting
Score npm, PyPI, Go, and Maven dependencies for supply-chain and vulnerability risk before an agent installs them.
socket, security, supply-chain, dependencies
Real-time web search with privacy-focused results.
search, web, realtime, news
Run read-only MySQL queries and inspect schemas from an AI agent.
database, sql, mysql, mariadb
Official
Official Plaid MCP — developer sandbox tooling and dashboard diagnostics, not a live bank-data connector.
plaid, fintech, banking-api, developer-tools
Geocoding, place search, directions, and travel times from Google Maps.
maps, geocoding, places, directions
Inject secrets from Doppler into agent workflows without exposing values in chat.
security, secrets, doppler, credentials
Query Search Console clicks, impressions, and queries from an AI agent.
seo, search-console, gsc, organic-search
Archived
Anthropic's reference Postgres MCP — archived July 2025 and superseded by Postgres MCP Pro or the Supabase MCP.
database, sql, postgres, archived
Inspect deployments, logs, and project state on Vercel from an AI agent.
vercel, hosting, deployment, nextjs
Archived
Search and read Google Drive files from an AI agent (archived reference implementation).
google-drive, storage, filesystem, documents
Inject 1Password secrets into an AI agent's tool calls without exposing them in chat.
security, secrets, 1password, vault
8 minLow
Official Foursquare Places MCP — POI search, GeoTagging, and rich place metadata across 100M+ places.
foursquare, places, poi-search, geocoding
Search, inspect, and run Hugging Face models and datasets from an agent.
huggingface, ml, models, inference
Self-hosted Git server — manage repos, issues, and PRs from an AI agent.
git, gitea, forgejo, codeberg
10 minMedium
Official
Official Fireflies remote MCP — query meeting transcripts, AI summaries, and action items via OAuth or API key.
fireflies, meeting-notes, transcripts, ai-summaries
2 minLow
Official
Official Fathom remote MCP — access meeting recordings, transcripts, summaries, and webhooks from any MCP client.
fathom, meeting-notes, transcripts, recordings
2 minLow
Archived
Manage Porkbun domains, DNS, DNSSEC, and SSL — read-only by default. Community MCP repository archived; Porkbun itself is unaffected.
porkbun, domains, registrar, dns
Official
Anthropic-verified Fellow Connector — query meeting notes, transcripts, action items, and calendar events from Claude.
fellow, meeting-notes, transcripts, action-items
< 1 minLow
Inspect schemas and run SQL against a Snowflake account from an AI agent.
database, warehouse, snowflake, sql
Real-time and forecast weather data via the OpenWeatherMap API.
weather, forecast, openweathermap, lifestyle
FAQ: Read-Only
Why use a read-only MCP specifically?
Agents will sometimes call tools you didn't expect. For a production database or a paid API, you want the server itself to refuse mutations — not just your prompt asking it nicely. Read-only is a hard stop, not a soft hint.
Can I make any MCP read-only?
Partially. Many MCPs gate writes behind environment variables or credentials scopes. If the MCP exposes write tools but you hand it read-only credentials, the write calls will fail at the API layer — same outcome in practice.