Can I configure read-only access to a database?

Yes. You can specify on a user create API key whether it has the ability to read, or read + write against your database.  This can be changed at any time.  Please note: The system API key privileges can't be changed, though the key itself can be regenerated at any time.