Struct ProxyConfig 

pub struct ProxyConfig {

    pub listen_addr: String,
    pub upstream_addr: String,
    pub policy_paths: Vec<String>,
    pub audit_enabled: bool,
    pub audit_file: Option<String>,
    pub fail_open: bool,
    pub hot_reload: bool,
    pub transport: TransportMode,
    pub upstream_command: Option<String>,
    pub upstream_args: Vec<String>,
    pub health_addr: Option<String>,
    pub kvlar_cloud_url: Option<String>,
    pub kvlar_api_key: Option<String>,
    pub kvlar_agent_id: Option<String>,
    pub kvlar_radar_url: Option<String>,
}

Configuration for the Kvlar MCP proxy.

Fields

listen_addr: String

Address to listen on (e.g., “127.0.0.1:9100”). TCP mode only.

upstream_addr: String

Upstream MCP server address to forward allowed requests to. TCP mode only.

policy_paths: Vec<String>

Path to the policy YAML file(s).

audit_enabled: bool

Whether to enable audit logging.

audit_file: Option<String>

Path to the audit log file (JSONL format).

fail_open: bool

Whether to fail-open (allow) when the policy engine errors. Default: false (fail-closed).

hot_reload: bool

Whether to watch policy files for changes and reload automatically.

transport: TransportMode

Transport mode (tcp or stdio). Default: tcp.

upstream_command: Option<String>

Command to spawn for stdio transport (e.g., “npx”). Only used when transport = stdio.

upstream_args: Vec<String>

Arguments for the upstream command. Only used when transport = stdio.

health_addr: Option<String>

Health check endpoint address (e.g., “127.0.0.1:9101”). Only used in TCP mode. Set to enable GET /health liveness probe.

kvlar_cloud_url: Option<String>

SHIELD cloud base URL (e.g., “https://app.kvlar.io”). When set with kvlar_api_key, enables cloud escalation and audit forwarding.

kvlar_api_key: Option<String>

API key for SHIELD cloud authentication (kvlar_sk_...).

kvlar_agent_id: Option<String>

Agent ID registered in SHIELD (UUID). Used to associate proxy audit events with a specific agent.

kvlar_radar_url: Option<String>

RADAR cloud base URL (e.g., “https://radar.kvlar.io”). When set, audit events are also forwarded to RADAR.

Implementations

impl ProxyConfig

pub fn from_file(path: &Path) -> Result<Self, Box<dyn Error>>

Loads configuration from a YAML file.

Trait Implementations

impl Clone for ProxyConfig

fn clone(&self) -> ProxyConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProxyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ProxyConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ProxyConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ProxyConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.