Which MCP surface best fits an agent that only needs to inspect TypeScript source under s…

Which MCP surface best fits an agent that only needs to inspect TypeScript source under src/?

1. read_source with a relative path, .ts restriction, byte cap, and caller authorization
2. run_shell with any command and a description asking the model to be careful
3. read_file with an absolute path and the server administrator credential
4. http_request with unrestricted URLs because files can use file URLs