Using the Remote GitHub MCP Server in Read-Only mode

[phryneas]

Describe the feature or problem you’d like to solve

Hi!
I would like to try the MCP, but after a few minutes I already had hallucinations like reading the wrong repository or fetching data in an infinite loop.

I have to admit: I'm concerned about hallucinations in the context of destructive operations like merging PRs, accidental comments on issues or even deleted repos.

Proposed solution

There seems to be a read-only mode, but if I interpret the documentation right, it's only available locally.

Could you consider providing a read-only entrypoint, or even a way of restricting which operations an agent can take?

[phryneas]

Found https://github.com/github/github-mcp-server/blob/main/docs/remote-server.md#remote-mcp-toolsets - sorry for the noise!