What we ran into We're running a pilot with Claude Code and the O11 MCP server in Service Studio, and it works well. But we quickly hit a governance question: we want agents to work in Development only, and we can't enforce that today. The agent simply gets all the developer's permissions. If a developer can publish to Test, so can their agent. LifeTime has no MCP setting. The write permissions setting lives in each developer's own Service Studio. Developers often have Service Studio open on both Development and Test. The agent only sees 127.0.0.1:, and none of the MCP tools say which environment it's connected to. So we can't build a reliable check on our side either. Agent changes are recorded under the developer's name, so you can't tell afterwards what an agent did on its own. Our only option now is to cut developers' own permissions on higher environments, and that's not what we want. What would help MCP setting per environment in LifeTime. Let an admin choose per environment: Disabled / Read-only / Read-write / Publish. Service Studio applies it at sign-in and developers can't override it. For example: Read-write in Development, Read-only in Test, Disabled in Production. Tell the agent where it is. Return the connected environment (name and hostname) in listApps or a separate tool. The agent can then confirm the target with the developer, and our own hooks can block actions in the wrong environment. Mark unattended agent publishes. When an agent publishes without review (the "Allow automatically merge and publish" setting), mark that version in Service Center and LifeTime as an agent publish. Changes the developer reviewed in Compare and Merge can stay under their name, as they are now. Why it matters Agents in O11 have real potential, but to use them safely we need central control in LifeTime, not settings and agreements per developer. These changes would make it much easier to start in Development and expand from there. We love to hear from you Are you already using the MCP server or other AI agents with O11? How do you keep agents out of the wrong environment, and which settings or team agreements work for you? Did we miss something, or would you solve it differently? Please share your experience in the comments, and vote if this matters to you too.