mayank_sethi·6 เดือนที่ผ่านมา·discussWe kept hitting cases where read-only made agents useless, but write access was too risky. We ended up building a small stdio MCP proxy that lets us block dangerous operations at the argument level