McpServerApprovalsConfig
Defined in: core/dist/config/shell-policy.d.ts:396
EXT-70 §4.7.1/§9 — the approvals relationship with ONE MCP server, keyed by the user’s own
mcpServers config key (§4.7.5 — the only identity a server has that is stable, unique and
user-authored; nothing a server declares about itself ever participates).
trustAnnotations names the hints that are BELIEVED from that server. It is a list rather than a
boolean because trusting readOnlyHint while distrusting openWorldHint is a coherent position
and the common one, and because a single “trusted server” flag throws that distinction away for
nothing. Absent or empty means what the default means: nothing external is believed — every
hint of that server’s collapses to the MCP fail-closed default, so its declarations cannot
perturb any rule.
Properties
Section titled “Properties”trustAnnotations?
Section titled “trustAnnotations?”
optionaltrustAnnotations?: ("readOnlyHint"|"destructiveHint"|"idempotentHint"|"openWorldHint")[]
Defined in: core/dist/config/shell-policy.d.ts:398
§4.7.1 — the hints believed from this server. Absent or empty trusts nothing.