diff --git a/src/scribe/mcp/server.py b/src/scribe/mcp/server.py
index 8dc5045..bd19447 100644
--- a/src/scribe/mcp/server.py
+++ b/src/scribe/mcp/server.py
@@ -110,6 +110,9 @@ _READ_ONLY_TOOLS = frozenset({
     # Which repos map to which project. Read-only by nature; bind_repo /
     # unbind_repo are the writes.
     "list_repo_bindings",
+    # The shape ledger's todo query (#2789). Reads only — classify_shapes is
+    # the write, and it is deliberately NOT here.
+    "list_shapes",
 })
 
 # Read-SHAPED tools that must NOT be reachable with a read key — a getter that