Skip to content

McpServerApprovalsConfig

Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/config/shell-policy.ts:572

EXT-70 §4.7.1/§9 — the approvals relationship with ONE MCP server, keyed by the user’s own mcpServers config key (§4.7.5 — the only identity a server has that is stable, unique and user-authored; nothing a server declares about itself ever participates).

trustAnnotations names the hints that are BELIEVED from that server. It is a list rather than a boolean because trusting readOnlyHint while distrusting openWorldHint is a coherent position and the common one, and because a single “trusted server” flag throws that distinction away for nothing. Absent or empty means what the default means: nothing external is believed — every hint of that server’s collapses to the MCP fail-closed default, so its declarations cannot perturb any rule.

optional trustAnnotations?: ("readOnlyHint" | "destructiveHint" | "idempotentHint" | "openWorldHint")[]

Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/config/shell-policy.ts:574

§4.7.1 — the hints believed from this server. Absent or empty trusts nothing.