Struct TrustScope 

pub struct TrustScope {
    pub name: String,
    pub min_trust: f32,
    pub allowed_tools: Vec<String>,
    pub denied_tools: Vec<String>,
    pub allow_destructive: bool,
    pub allow_network: bool,
    pub allow_filesystem_write: bool,
    pub require_review: bool,
    pub max_calls_per_minute: u32,
}

Trust scope — defines what external MCP servers are allowed to do.

Fields

name: String

Name of this trust scope (e.g., “default”, “strict”, “external”).

min_trust: f32

Minimum trust level required for tool execution.

allowed_tools: Vec<String>

Allowed tool name patterns (empty = all allowed).

denied_tools: Vec<String>

Denied tool name patterns (takes precedence over allowed).

allow_destructive: bool

Whether destructive tools are allowed.

allow_network: bool

Whether network access tools are allowed.

allow_filesystem_write: bool

Whether filesystem write tools are allowed.

require_review: bool

Whether human review is required for all tools in this scope.

max_calls_per_minute: u32

Maximum number of tool calls per minute (0 = unlimited).

Implementations

impl TrustScope

pub fn strict() -> Self

Strict scope for untrusted external servers.

pub fn permissive() -> Self

Permissive scope for trusted internal servers.

pub fn is_tool_allowed(&self, manifest: &ToolManifest) -> bool

Check if a tool is allowed under this trust scope.

Trait Implementations

impl Clone for TrustScope

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TrustScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TrustScope

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TrustScope

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for TrustScope

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.