Restrict MCP connections to read-only operations

Organization admins can now restrict all MCP connections in their organization to read-only operations. MCP clients such as Cursor and Claude Code can view services and other resources, but cannot create, modify, or delete them.

The restriction applies to all MCP connections in the organization. Users cannot override it in their client configuration.

To restrict MCP connections to read-only operations, go to Admin > Security > Authentication and select Restrict MCP connections to read-only operations.

For more information, see Aiven MCP and Set authentication policies for organization users.