Struct McpServerConfig 

pub struct McpServerConfig {
    pub command: String,
    pub args: Vec<String>,
    pub env: HashMap<String, String>,
    pub url: Option<String>,
    pub headers: HashMap<String, String>,
    pub env_headers: HashMap<String, String>,
    pub allow_private_network: bool,
    pub enabled_tools: Vec<String>,
    pub disabled_tools: Vec<String>,
    pub defer: Option<bool>,
}

MCP server configuration

Fields

command: String

Command to execute (e.g., “npx”, “node”, “python”). Empty = unset; exactly one of command / url must be set (see Self::transport_kind).

args: Vec<String>

Command-line arguments

env: HashMap<String, String>

Environment variables for the server process

url: Option<String>

Streamable HTTP endpoint URL for a remote MCP server. Presence selects the HTTP transport; mutually exclusive with command. Must never serialize as a bare None — toml errors on unsupported None values.

headers: HashMap<String, String>

Literal HTTP headers sent on every request to url (e.g. an Authorization token). Values are secrets: redacted in Debug.

env_headers: HashMap<String, String>

HTTP headers whose VALUES come from environment variables (map is header name -> env var name), resolved at request-build time so a secret header never has to live in config.toml. A missing env var is skipped. Same semantics as UserProviderConfig::env_headers.

allow_private_network: bool

Allow url to resolve to private/link-local addresses. Off by default: plugin bundles ship MCP configs, and a malicious bundle must not be able to point a server entry at 169.254.169.254 or the LAN.

enabled_tools: Vec<String>

If non-empty, only these tool names are exposed to the model.

disabled_tools: Vec<String>

Tool names hidden from the model. Takes precedence over enabled_tools.

defer: Option<bool>

Per-server deferral override: Some(false) always advertises this server’s tools directly (skips tool_search); Some(true) defers even when the global mcp_defer_tools is off; None follows the global setting.

Implementations

impl McpServerConfig

pub fn transport_kind(&self) -> Result<TransportKind>

Resolve which transport this config selects, enforcing the invariants: exactly one of command / url set, and an HTTP url must be https anywhere or http to a loopback host only (plaintext to a routable host would leak Authorization headers in cleartext).

pub fn tool_allowed(&self, tool_name: &str) -> bool

Whether tool_name should be exposed to the model: hidden when listed in disabled_tools (which wins), else allowed when enabled_tools is empty (allow-all) or names it.

Trait Implementations

impl Clone for McpServerConfig

fn clone(&self) -> McpServerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for McpServerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for McpServerConfig

fn default() -> McpServerConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for McpServerConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for McpServerConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.