Update README

Author: mneudert

README.md

@@ -4,7 +4,7 @@
 
 McpServer is an early preview plugin that adds a secure Model Context Protocol (MCP) endpoint to Matomo so AI assistants and MCP-compatible clients can work with analytics context directly from your Matomo instance.
 
-It provides read-oriented tools for sites, reports, processed report data, goals, segments, and dimensions using the same Matomo authentication and access rules you already use in Matomo.
+It provides analytics tools for sites, reports, processed report data, goals, segments, and dimensions using the same Matomo authentication and access rules you already use in Matomo. Administrators can also optionally enable raw Matomo API discovery and direct API execution tools for advanced MCP workflows.
 
 ### Setup
 
@@ -18,13 +18,16 @@ For the recommended end-user setup flow, use the in-product connect guide at **A
 ### Security And Access Model
 
 - MCP access is disabled by default.
+- Raw Matomo API discovery and execution tools are separately disabled by default and must be enabled by an administrator.
 - The plugin uses Matomo authentication.
 - Data access is limited to the same sites and reports the Matomo user can already access.
+- When raw API access is enabled, MCP clients can access the same Matomo API surface available to the authenticated user, including state-changing methods if an administrator has allowed them.
 - If features such as the Visitor Log are available to that user, MCP clients may access the same underlying data scope.
+- Review privacy, security, and compliance requirements before enabling raw API access.
 
 ### Additional Documentation
 
-The FAQ includes additional technical documentation for endpoint details, configuration, MCP enablement behavior, supported capabilities, and troubleshooting.
+The FAQ includes additional technical documentation for endpoint details, configuration, MCP enablement behavior, raw API access guidance, supported capabilities, and troubleshooting.
 
 ## Support