Struct ArgumentAllowlist 

#[non_exhaustive]
pub struct ArgumentAllowlist {
    pub tool: String,
    pub argument: String,
    pub allowed: Vec<String>,
    pub required: bool,
}

Per-tool argument allowlist entry.

When the middleware sees a tools/call for tool, it extracts the string value at argument from the call’s arguments object and checks its first token against allowed. If the token is not in the list the call is rejected with 403.

By default this constrains the value only when the argument is present – omitting it entirely skips the check. Set required to also demand the argument be supplied.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

tool: String

Tool name to match (exact or glob, e.g. "run_query").

argument: String

Argument key whose value is checked (e.g. "cmd", "query").

allowed: Vec<String>

Permitted first-token values. Empty means unrestricted.

required: bool

Require the argument to be present and string-valued.

Defaults to false, preserving the historical semantics: an allowlist constrains the value when the argument is supplied, and a caller omitting it passes unchecked. That is safe when the tool’s input schema already marks the argument required, but fails open when the handler substitutes a default for a missing value.

When true, a call that omits the argument – or supplies a non-string – is denied with 403, independently of allowed. Setting required with an empty allowed therefore means “must be supplied as a string, any value accepted”.

Implementations

impl ArgumentAllowlist

pub fn new( tool: impl Into<String>, argument: impl Into<String>, allowed: Vec<String>, ) -> Self

Create an argument allowlist for a tool.

The argument is optional by default; use with_required to demand its presence.

pub const fn with_required(self, required: bool) -> Self

Require the argument to be present and string-valued.

Trait Implementations

impl Clone for ArgumentAllowlist

fn clone(&self) -> ArgumentAllowlist

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ArgumentAllowlist

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ArgumentAllowlist

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.