How to set Gmail OAuth for ONLY READ?

you need to create custom OAuth2 credential for your problem.