Anyone using postgres-mcp for AI agent data access? Security concerns?

I'm evaluating postgres-mcp to let Claude agents query our production database directly, but I'm worried about read/write access controls. Has anyone here deployed it? How do you handle permissions—are you restricting agents to specific schemas or using separate read-only replicas? The performance analysis feature sounds useful but I want to make sure we're not opening ourselves up to accidental data mutations.