readOnlyHint isn't a permission: blocking a destructive MCP tool by policy

· Dev.to