Some questions around Bluetooth Server

Only way to set a new value I know about is nrf.updateServices, correct ?

And the only way to read a value after being written by client is to keep track with onWrite, correct ?

Yes, that's right - on both counts. Personally I'd have thought that getting JavaScript to supply the value on demand might be quite difficult given the time it might take to execute?