Added readonlymode setting to disable mutating tools

README.md

@@ -34,3 +34,4 @@ At least _one_ authentication provider must be configured, executed in order:
 | Sitecore:CliUserFileAuthentication:EndpointName | `xmCloud`                                                       | The endpoint name to use                 |
 | Sitecore:CloudAuthentication:ClientId           |                                                                 | Id with access to authoring endpoint     |
 | Sitecore:CloudAuthentication:ClientSecret       |                                                                 | Secret with access to authoring endpoint |
+| Sitecore:ReadonlyMode                           | `false`                                                         | Disables all tools that mutates data     |

src/SitecoreBasicMcp/AssemblyMarker.cs

@@ -1,5 +1,5 @@
 namespace SitecoreBasicMcp;
 
-public class AssemblyMarker
+internal class AssemblyMarker
 {
 }

src/SitecoreBasicMcp/SitecoreSettings.cs

@@ -21,4 +21,6 @@ public class CloudAuthenticationSettings
         public string? ClientId { get; set; }
         public string? ClientSecret { get; set; }
     }
+
+    public bool ReadonlyMode { get; set; }
 }

src/SitecoreBasicMcp/StartupExtensions.cs

@@ -3,23 +3,27 @@
 using Microsoft.Extensions.Hosting;
 using ModelContextProtocol.Protocol;
 using SitecoreBasicMcp.Authentication;
+using SitecoreBasicMcp.Tools;
 
 namespace SitecoreBasicMcp;
 
 public static class StartupExtensions
 {
     public static IMcpServerBuilder AddSitecoreMcpServer(this IHostApplicationBuilder builder)
     {
-        builder.Services.Configure<SitecoreSettings>(builder.Configuration.GetSection(SitecoreSettings.Key));
+        var sitecoreSection = builder.Configuration.GetSection(SitecoreSettings.Key);
+        var sitecoreSettings = sitecoreSection.Get<SitecoreSettings>();
+
+        ArgumentNullException.ThrowIfNull(sitecoreSettings, nameof(sitecoreSettings));
+
+        builder.Services.Configure<SitecoreSettings>(sitecoreSection);
         builder.Services.AddSingleton<IAuthenticationProvider, SitecoreCliUserFileAuthenticationProvider>();
         builder.Services.AddSingleton<IAuthenticationProvider, SitecoreCloudAuthenticationProvider>();
         builder.Services.AddSingleton<SitecoreAuthenticationService>();
 
         var serverBuilder = builder.Services
             .AddHttpClient()
             .AddMcpServer()
-            .WithToolsFromAssembly(typeof(AssemblyMarker).Assembly)
-            .WithPromptsFromAssembly(typeof(AssemblyMarker).Assembly)
             .AddCallToolFilter(next => async (context, cancellationToken) =>
             {
                 try
@@ -36,6 +40,15 @@ public static IMcpServerBuilder AddSitecoreMcpServer(this IHostApplicationBuilde
                 }
             });
 
+        if (sitecoreSettings.ReadonlyMode)
+        {
+            serverBuilder.WithTools<GetItemTool>();
+        }
+        else
+        {
+            serverBuilder.WithToolsFromAssembly(typeof(AssemblyMarker).Assembly);
+        }
+
         return serverBuilder;
     }
 }