"author:fport" matching MCP servers:

Publishes a read-only data handle exposing SQL querying and URL fetching, plus a separately scoped read-write handle for actions like issuing refunds and sending customer email. Every call is checked against a permission set frozen before any untrusted text is read, with irreversible actions held behind one or two human approval signatures.