We should allow users to disable tools by name and/or limit the server to non-destructive operations only.