I'd like to use the MCP but only if it is read-only.

And also ideally a way to restrict the MCP to note connect to the production database and only connect to the read replica.