Best Read-Only MCPs

Read-only MCPs can inspect, query, and fetch — but they never write, post, or trigger side effects. That makes them the safest option for exploratory agent workflows, production databases, and anywhere a misfire would cost money or corrupt state.

37 MCPs in this collectionFilter: read-only

Top Read-Only MCPs ranked

Popularity-ordered. Click any card for install snippets, fact sheet, and trust signals.

Current time and IANA timezone conversion — the first-party MCP that tells an agent what time it actually is.

time, timezone, clock, iana
2 minLow
Official

Query and inspect MongoDB collections from Claude, Cursor, and VS Code.

database, nosql, mongodb, atlas
5 minLow
Official

Inspect keys, run commands, and debug Redis from an AI agent.

database, cache, redis, valkey
3 minLow

Look up Terraform Registry providers and modules, and manage HCP Terraform workspaces from an AI agent.

terraform, iac, infrastructure-as-code, hashicorp
5 minMedium

Retrieve web pages and convert them to clean markdown.

web, fetch, markdown, scraping
1 minLow
7
PostgreSQL (archived)
Archived

Anthropic's reference Postgres MCP — archived July 2025 and superseded by Postgres MCP Pro or the Supabase MCP.

database, sql, postgres, archived
3 minLow
Official

Official Plaid MCP — developer sandbox tooling and dashboard diagnostics, not a live bank-data connector.

plaid, fintech, banking-api, developer-tools
10 minMedium
Official

Query ClickHouse and ClickHouse Cloud columnar warehouses from an AI agent.

database, warehouse, clickhouse, olap
10 minMedium
10
Official

Search indices, inspect mappings, and run queries against Elasticsearch from an AI agent.

database, search, elasticsearch, elastic
10 minMedium
Official

Inject 1Password secrets into an AI agent's tool calls without exposing them in chat.

security, secrets, 1password, vault
8 minLow
Official

Inject secrets from Doppler into agent workflows without exposing values in chat.

security, secrets, doppler, credentials
6 minLow

Manage Bitbucket Cloud repos, pipelines, and pull requests from an AI agent.

git, bitbucket, atlassian, pipelines
10 minMedium

Official Mapbox MCP — geocoding, directions, isochrones, search, and tiles across the Mapbox API surface.

mapbox, maps, geocoding, directions
5 minLow

Official Foursquare Places MCP — POI search, GeoTagging, and rich place metadata across 100M+ places.

foursquare, places, poi-search, geocoding
5 minLow
Official

Live SERP, keyword, backlink, and on-page SEO data for an AI agent.

seo, serp, keywords, backlinks
10 minMedium
Official

Score npm, PyPI, Go, and Maven dependencies for supply-chain and vulnerability risk before an agent installs them.

socket, security, supply-chain, dependencies
3 minLow
Official

Query Google Ads campaigns, metrics, and account performance with GAQL — Google's official MCP.

google-ads, ads, ppc, marketing
10 minMedium

Inspect AWS resources, read CloudWatch logs, and audit IAM from an AI agent.

aws, cloud, cloudwatch, iam
15 minMedium
Official

Query GA4 reports, funnels, and realtime data from an AI agent.

analytics, ga4, google-analytics, reporting
15 minMedium
Official

Triage errors, inspect traces, and query events from Sentry.

sentry, errors, monitoring, observability
3 minLow
Archived

Search and read Google Drive files from an AI agent (archived reference implementation).

google-drive, storage, filesystem, documents
15 minMedium

Run read-only MySQL queries and inspect schemas from an AI agent.

database, sql, mysql, mariadb
5 minLow

Real-time web search with privacy-focused results.

search, web, realtime, news
5 minLow

Up-to-date library docs pulled directly into your AI context.

coding, documentation, libraries, accuracy
3 minLow

Inspect Figma designs, components, and variables from an agent.

figma, design, design-to-code, components
5 minMedium

Query Google BigQuery datasets from Claude, Cursor, and VS Code.

database, warehouse, bigquery, google-cloud
10 minMedium

Self-hosted Git server — manage repos, issues, and PRs from an AI agent.

git, gitea, forgejo, codeberg
10 minMedium

Inspect schemas and run SQL against a Snowflake account from an AI agent.

database, warehouse, snowflake, sql
15 minMedium
Official

Official Fireflies remote MCP — query meeting transcripts, AI summaries, and action items via OAuth or API key.

fireflies, meeting-notes, transcripts, ai-summaries
2 minLow
Official

Official Fathom remote MCP — access meeting recordings, transcripts, summaries, and webhooks from any MCP client.

fathom, meeting-notes, transcripts, recordings
2 minLow

Query Search Console clicks, impressions, and queries from an AI agent.

seo, search-console, gsc, organic-search
15 minMedium
36
Porkbun (MCP archived)
Archived

Manage Porkbun domains, DNS, DNSSEC, and SSL — read-only by default. Community MCP repository archived; Porkbun itself is unaffected.

porkbun, domains, registrar, dns
10 minMedium
Official

Anthropic-verified Fellow Connector — query meeting notes, transcripts, action items, and calendar events from Claude.

fellow, meeting-notes, transcripts, action-items
< 1 minLow

FAQ: Read-Only

Why use a read-only MCP specifically?

Agents will sometimes call tools you didn't expect. For a production database or a paid API, you want the server itself to refuse mutations — not just your prompt asking it nicely. Read-only is a hard stop, not a soft hint.

Can I make any MCP read-only?

Partially. Many MCPs gate writes behind environment variables or credentials scopes. If the MCP exposes write tools but you hand it read-only credentials, the write calls will fail at the API layer — same outcome in practice.

Other collections