Read only? Yes.

But the readonly needs to be enforced on the service side. Like my personal agent has read only access to my Fastmail account via their MCP.

It can't send mail as me, but it can read, categorise and organise my mail.

If I were to give it the ability to send mail, it sure a fuck wouldn't be as me. It would have its own identity and account.