Read only config for MCP

[dejoma]

I wanna expose this to my non-tech colleagues; And if one of them types delete project.. well yeah need I say more..

Would love to have 'read only' permissions/setup.

[davidgomes]

@dejoma thank you for reporting this. If I'm not mistaken, if you use OAuth sign-in, then the API will not be able to call the delete project unless the user has that permission.

Is this correct or totally off @Shridhad ?

[dejoma]

To be honest, when you're using Claude desktop, it's impossible to connect to an organization project. I can only make this work inside Cursor...

See this comment: #44

[Shridhad]

@dejoma you should be able to list organization projects with following prompt in Claude. The OAuth gives same access level your organization projects -

Prompt: list projects in organization <org_id>

Once claude has project name or id, it should be able to work with that project with no issues.

Access level: if you are a member of organization (not admin) you should not be able to delete the project, so is Claude.

[dejoma]

Nice it's working now all of a sudden!

Some other comments:

1. It keeps asking for authorization, sometimes I have 20 tabs open asking for authorization
2. I have multiple MCPs enabled, and 2 of them (Neon and Linear) have one "list_projects". Even when I specify "List projects with neon MCP" it still calls the Linear MCP... (not sure if you can do anything about this)
3. How can I "test" that somebody can't delete anything?