feat: Allow using the MCP in read-only mode (KEEP-841)

[sanbotto]

Opening now in order to test in a PR env.

[github-actions]

PR Environment Deployed

Your PR environment has been deployed!

Environment Details:

• URL: https://app-pr-1592.keeperhub.com
• Namespace: pr-1592
• Cluster: techops-staging
• Image Tag: 9f5a726
• Commit: 9f5a7266b4a68e9df32b57baa882b9a7e3990057

Components:

• Keeperhub Application
• PostgreSQL Database (isolated instance)
• LocalStack (SQS emulation)
• Redis (isolated instance)
• Schedule Dispatcher (staging image)
• Block Dispatcher (staging image)
• Event Tracker (staging image)

The environment will be automatically cleaned up when this PR is closed or merged.

[sanbotto]

Tested thoroughly. See screenshots for reference. Read-only works as expected, full access continues working as it currently does.

​

I have a secondary proposed UI for the modal, just to better visually differentiate each button:

LMK which one is preferred.

[joelorzet]

Tested thoroughly. See screenshots for reference. Read-only works as expected, full access continues working as it currently does.

​

I have a secondary proposed UI for the modal, just to better visually differentiate each button:

LMK which one is preferred.

👋 @sanbotto,

I would recommend the first option, as we don't have any green buttons in the UI.

Regarding the third button, Read-only, I would suggest using either a dropdown to select the desired scope or a set of checkboxes. All-Write could be the default option, with additional Write and Read-only scope checkboxes available for more granular control.

Besides that, scopes addition is a great feature for the MCP!

[sanbotto]

Yeah, using checkboxes is a good option, leaving the original 2 buttons untouched. I'll try it out.

[sanbotto]

Checkboxes looking good and working as expected. Selecting a scope gives you that scope; no more, no less. Tested locally. PR env will be ready in ~30m for anyone else to double check this. Video of the UI:

checkboxes.mp4

[github-actions]

PR Environment Deployed

Your PR environment has been deployed!

Environment Details:

• URL: https://app-pr-1592.keeperhub.com
• Namespace: pr-1592
• Cluster: techops-staging
• Image Tag: 3c261f9
• Commit: 3c261f9318a46992ef3933219af6253c2d768d18

Components:

• Keeperhub Application
• PostgreSQL Database (isolated instance)
• LocalStack (SQS emulation)
• Redis (isolated instance)
• Schedule Dispatcher (staging image)
• Block Dispatcher (staging image)
• Event Tracker (staging image)

The environment will be automatically cleaned up when this PR is closed or merged.

[joelorzet]

Looks very good there! probably a nit one, but if you have write permissions you should have read ones I guess. Not totally sure about this!

Anyways, currently for me looks good to merge

[sanbotto]

Looks very good there! probably a nit one, but if you have write permissions you should have read ones I guess. Not totally sure about this!

I thought of that, makes sense, but I rather leave that decision to the user.

[joelorzet]

lgtm

[github-actions]

🧹 PR Environment Cleaned Up

The PR environment has been successfully deleted.

Deleted Resources:

• Namespace: pr-1592
• All Helm releases (Keeperhub, Scheduler, Event services)
• PostgreSQL Database (including data)
• LocalStack, Redis
• All associated secrets and configs

All resources have been cleaned up and will no longer incur costs.