Skip to content

McpServerApprovalsConfig

Defined in: core/dist/config/shell-policy.d.ts:396

EXT-70 §4.7.1/§9 — the approvals relationship with ONE MCP server, keyed by the user’s own mcpServers config key (§4.7.5 — the only identity a server has that is stable, unique and user-authored; nothing a server declares about itself ever participates).

trustAnnotations names the hints that are BELIEVED from that server. It is a list rather than a boolean because trusting readOnlyHint while distrusting openWorldHint is a coherent position and the common one, and because a single “trusted server” flag throws that distinction away for nothing. Absent or empty means what the default means: nothing external is believed — every hint of that server’s collapses to the MCP fail-closed default, so its declarations cannot perturb any rule.

optional trustAnnotations?: ("readOnlyHint" | "destructiveHint" | "idempotentHint" | "openWorldHint")[]

Defined in: core/dist/config/shell-policy.d.ts:398

§4.7.1 — the hints believed from this server. Absent or empty trusts nothing.