Read-Write MCP: Three Cloud Operations We Stopped Letting AI Touch After 90 Days

The read-only MCP server work shipped clean. AI agents could read tags, search logs, query costs, walk topology. Operators saved hours per incident. The next question was obvious: which writes can the agent do too. We turned write capability on for tagging, log retention adjustments, idle non-prod resource stops, and a handful of other low-blast operations. Most of that stayed on. Ninety days in, three specific write classes got pulled back to read-and-propose. The pieces that stayed write-enab...