Read Only Mode

[MyNameisStitch]

I'm using OpenClaw and i'd like to give my agent access to YNAB but I wanted to gate it to read-only as i'm getting used to working with it. Would it be possible to add a switch for read-only to your cli tool?

[stephendolan]

My understanding is that you can't actually generate a YNAB API key with scoped permissions to read-only.

Even if we had a readonly "mode", it would be more ceremony than an actual constraint.

https://api.ynab.com/#:~:text=Request%20Security%20Parameters-,READ%2DONLY%20SCOPE,-When%20an%20OAuth

You should be able to use your agent harness to specify allowed and denied tools, though, if you're using the MCP or if the harness has sufficiently granular bash permissions.