Is there a way to constrain access such that I can ensure the model has read only access, and cannot mutate data?

[drk-mtr]

This would be a nice guardrail to have - apols if I've missed this from the documentation.

[drk-mtr]

If I've understood correctly I think the answer is:

• It should be possible very soon, as part of PR Added read-only tool annotations & --read-only CLI flag #604.
• It'll be achieved by using the --read-only command line flag.
• In vscode, this can be configured in mcp.json.