MCP configuration¶
Paths in the tables are relative to [mcp]. Check parsing with
gdsgate doctor --config <PATH> --json. See the
MCP server guide.
[mcp]¶
Used by: Authority.
Per-tool MCP policy inputs.
| Key | Type | Default | Purpose |
|---|---|---|---|
destructive_patterns |
array of string | [] |
Glob patterns for destructive tool names. A matching tool's Tool Cedar entity has is_destructive == true, so a policy can block it (forbid mcpCallTool when resource.is_destructive). Empty: no tool is destructive. A server's destructiveHint does not set this attribute. |
Cedar rules: Policy → MCP per-tool policy.
Per-tool authorization is turned on by enforce_tool_policy on the MCP
backend.