- Restrict to repo collaborators via author_association check - Use OAuth token for subscription billing - Disable Edit/Write tools and set contents:read permission to enforce review-only