Pro users can connect custom MCPs, but write actions are gated. For personally owned tools, users should be able to explicitly authorize specific write actions such as create_item, update_item, or complete_item. This would enable genuinely useful personal workflows while keeping permissions granular and user-controlled.
Example: I’m trying to connect MCP for myself to a ChatGPT site I’ve built to manage tasks etc. I’d like to be able to use voice mode (and it’s new abilities) to make updates for me throughout the day. It can read now, but it can’t write.