McpToolApprovalEntry
Defined in: core/dist/config/shell-policy.d.ts:361
§3.1 — an mcpTool entry: one server’s tool.
Extends
Section titled “Extends”ApprovalEntryCommon
Properties
Section titled “Properties”
optionalhost?:string
Defined in: core/dist/config/shell-policy.d.ts:372
§4.7.4 — optional exact-match bound on the call’s host.
matcher
Section titled “matcher”matcher:
ApprovalMatcher
Defined in: core/dist/config/shell-policy.d.ts:363
pattern
Section titled “pattern”pattern:
string|ApprovalHintPattern
Defined in: core/dist/config/shell-policy.d.ts:364
optionalrate?:boolean
Defined in: core/dist/config/shell-policy.d.ts:343
§3.2 — whether the rater still reviews a call this entry matched, honored at the rater rungs
and inert at the deterministic ones. Valid on EVERY type. Absent takes the §3.2 default: an
entry skips the rater only to the extent that it recorded what the rater would have seen, so
shell + exact defaults to false and everything else to true.
Inherited from
Section titled “Inherited from”ApprovalEntryCommon.rate
server
Section titled “server”server:
string
Defined in: core/dist/config/shell-policy.d.ts:370
§4.7.5 — required, and the user’s own key in mcpServers: the only identity a server has
that is stable, unique and user-authored. The literal * means every server, which is why a
configured server may not be named *.
type:
"mcpTool"
Defined in: core/dist/config/shell-policy.d.ts:362