NEO4J_READ_ONLY=true but write_neo4j_cypher is exposed :-)

[hdjebar]

Expected Behavior (Mandatory)

when NEO4J_READ_ONLY=true write_neo4j_cypher is not exposed as mcp tool:-)

Actual Behavior (Mandatory)

when NEO4J_READ_ONLY=true write_neo4j_cypher is exposed as mcp tool:-)

How to Reproduce the Problem

deploy in docker with NEO4J_READ_ONLY=true , write_neo4j_cypher is exposed as mcp tool:-)

Simple Example

Datasets and Statements

Screenshots (where it's possibile)

Specifications (Mandatory)

Currently used versions

Versions

• OS:
• Library:
• Neo4j:

[a-s-g93]

hi @hdjebar can you please provide your MCP config? How are you deploying the docker version (MCP toolkit, claude desktop config, etc)?