Struct ArgumentAllowlist 

#[non_exhaustive]
pub struct ArgumentAllowlist {
    pub tool: String,
    pub argument: String,
    pub allowed: Vec<String>,
    pub required: bool,
    pub deny_unknown_arguments: bool,
}

Per-tool argument allowlist entry.

When the middleware sees a tools/call for tool, it extracts the string value at argument from the call’s arguments object and checks its first token against allowed. If the token is not in the list the call is rejected with 403.

By default this constrains the value only when the argument is present – omitting it entirely skips the check. Set required to also demand the argument be supplied. This compatibility default is expected to flip to true in the next major version; prefer ArgumentAllowlist::new_required for new policies that should fail closed when the argument is omitted.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

tool: String

Tool name to match (exact or glob, e.g. "run_query").

argument: String

Argument key whose value is checked (e.g. "cmd", "query").

allowed: Vec<String>

Permitted first-token values. Empty means unrestricted.

required: bool

Require the argument to be present and string-valued.

Defaults to false, preserving the historical semantics: an allowlist constrains the value when the argument is supplied, and a caller omitting it passes unchecked. That is safe when the tool’s input schema already marks the argument required, but fails open when the handler substitutes a default for a missing value.

When true, a call that omits the argument – or supplies a non-string – is denied with 403, independently of allowed. Setting required with an empty allowed therefore means “must be supplied as a string, any value accepted”.

deny_unknown_arguments: bool

Reject any top-level argument that no allowlist for this (role, tool) names.

Defaults to false, preserving the historical semantics: allowlists constrain only the arguments they name, so {"cmd":"ls","danger":true} passes when only cmd is allowlisted. That is safe when the tool’s input schema rejects unknown keys, and fails open when it does not.

When true on ANY allowlist matching a (role, tool) pair, the permitted argument names become the union of every matching allowlist’s argument, and any other top-level key is denied with 403. Object- and array-valued arguments are also denied, because this crate has no nested-path allowlist to constrain their contents.

Implementations

impl ArgumentAllowlist

pub fn new( tool: impl Into<String>, argument: impl Into<String>, allowed: Vec<String>, ) -> Self

Create an argument allowlist for a tool.

The argument is optional by default for backward compatibility; prefer new_required for new policies that should fail closed when the argument is omitted.

pub fn new_required( tool: impl Into<String>, argument: impl Into<String>, allowed: Vec<String>, ) -> Self

Create an argument allowlist that requires the argument to be present.

This is the recommended constructor for new policies because it fails closed when the caller omits the constrained argument.

pub const fn with_required(self, required: bool) -> Self

Require the argument to be present and string-valued.

pub const fn with_deny_unknown_arguments(self, deny: bool) -> Self

Confine the tool to only the arguments its allowlists name.

Applies to the whole (role, tool) pair, not just this entry: see deny_unknown_arguments.

Trait Implementations

impl Clone for ArgumentAllowlist

fn clone(&self) -> ArgumentAllowlist

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ArgumentAllowlist

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ArgumentAllowlist

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.