MCP presents itself as read-only

Although I set read-only mode to false and I can do DMLs and DDLs via the MCP, somewhere the MCP advertises itself as read-only.
I have to counteract this behavior via agent rules to let it know that it can perform DMLs and DDLs despite the MCP's warnings.
It would be best for the MCP to advertise its capabilities depending on the read-only mode.