This is exactly why you must not do that... But an MCP with read-only scope is what you need. Not a limit in front of a write path, but read-only by construction. I use a MCP of my monitoring app for that (Maintenant), so LLM can inspect my stack easily.