Struct BearerTokenConfig 

pub struct BearerTokenConfig {
    pub token: String,
    pub allow_tools: Vec<String>,
    pub deny_tools: Vec<String>,
}

Per-token configuration for bearer auth with optional tool scoping.

Allows restricting which tools each bearer token can access, bridging the gap between all-or-nothing bearer auth and full JWT/RBAC.

Examples

use mcp_proxy::config::BearerTokenConfig;

let frontend = BearerTokenConfig {
    token: "frontend-token".into(),
    allow_tools: vec!["files/read_file".into()],
    deny_tools: vec![],
};

let admin = BearerTokenConfig {
    token: "admin-token".into(),
    allow_tools: vec![],
    deny_tools: vec![],
};

Fields

token: String

The bearer token value. Supports ${ENV_VAR} syntax.

allow_tools: Vec<String>

Tools this token can access (namespaced, e.g. “files/read_file”). Empty means all tools allowed.

deny_tools: Vec<String>

Tools this token cannot access.

Trait Implementations

impl Clone for BearerTokenConfig

fn clone(&self) -> BearerTokenConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BearerTokenConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for BearerTokenConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for BearerTokenConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.