Describe the feature or problem you’d like to solve

Hi!
I would like to try the MCP, but after a few minutes I already had hallucinations like reading the wrong repository or fetching data in an infinite loop.

I have to admit: I'm concerned about hallucinations in the context of destructive operations like merging PRs, accidental comments on issues or even deleted repos.

Proposed solution

There seems to be a read-only mode, but if I interpret the documentation right, it's only available locally.

Could you consider providing a read-only entrypoint, or even a way of restricting which operations an agent can take?