I’m setting up Claude with an MCP server that can read project files and run a few actions. I’m unsure where people draw the line between giving it enough access to be useful and granting more permissions than a task needs.

Do you keep separate servers or configurations for read-only work and actions that change files? I’d be interested in practical examples of scoping MCP server permissions, especially for a shared development environment.