There is no working way to selectively disable individual DML tools in the MCP server. The only granularity that works is entity-level "mcp": false or "mcp": {"dml-tools": false}.
"dml-tools": false does not disable DML tools.
Configuration
"dml-tools": {
"delete-record": false,
"create-record": false
}
Problem
Setting a tool to false (boolean) has zero effect. All tools remain in tools/list and are callable. The dab configure CLI generates this exact format, but the server ignores it.
Deeper problem
"dml-tools": {
"describe-entities": {"enabled": true},
"read-records": {"enabled": true},
"delete-record": {"enabled": false} // ← this causes ALL tools to disappear
}