Unless the server marks the tool readOnlyHint (the default: hints are untrusted, so writes ask).
readOnlyHint