Struct McpConfig 

pub struct McpConfig {

    pub servers: Vec<McpServerConfig>,
    pub allowed_commands: Vec<String>,
    pub max_dynamic_servers: usize,
    pub pruning: ToolPruningConfig,
    pub trust_calibration: TrustCalibrationConfig,
    pub tool_discovery: ToolDiscoveryConfig,
    pub max_description_bytes: usize,
    pub max_instructions_bytes: usize,
    pub elicitation_enabled: bool,
    pub elicitation_timeout: u64,
    pub elicitation_queue_capacity: usize,
    pub elicitation_warn_sensitive_fields: bool,
    pub lock_tool_list: bool,
    pub default_env_isolation: bool,
}

Fields

servers: Vec<McpServerConfig>

allowed_commands: Vec<String>

max_dynamic_servers: usize

pruning: ToolPruningConfig

Dynamic tool pruning for context optimization.

trust_calibration: TrustCalibrationConfig

Trust calibration settings (opt-in, disabled by default).

tool_discovery: ToolDiscoveryConfig

Embedding-based tool discovery (#2321).

max_description_bytes: usize

Maximum byte length for MCP tool descriptions. Truncated with “…” if exceeded. Default: 2048.

max_instructions_bytes: usize

Maximum byte length for MCP server instructions. Truncated with “…” if exceeded. Default: 2048.

elicitation_enabled: bool

Enable MCP elicitation (servers can request user input mid-task). Default: false — all elicitation requests are auto-declined. Opt-in because it interrupts agent flow and could be abused by malicious servers.

elicitation_timeout: u64

Timeout for user to respond to an elicitation request (seconds). Default: 120.

elicitation_queue_capacity: usize

Bounded channel capacity for elicitation events. Requests beyond this limit are auto-declined with a warning to prevent memory exhaustion from misbehaving servers. Default: 16.

elicitation_warn_sensitive_fields: bool

When true, warn the user before prompting for fields whose names match sensitive patterns (password, token, secret, key, credential, etc.). Default: true.

lock_tool_list: bool

Lock tool lists after initial connection for all servers.

When true, tools/list_changed refresh events are rejected for servers that have completed their initial connection, preventing mid-session tool injection. Default: false (opt-in, backward compatible).

default_env_isolation: bool

Default env isolation for all Stdio servers. Per-server env_isolation overrides this.

When true, spawned processes only receive a minimal base env + their declared env map. Default: false (backward compatible).

Trait Implementations

impl Clone for McpConfig

fn clone(&self) -> McpConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for McpConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for McpConfig

fn default() -> McpConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for McpConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<McpConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for McpConfig

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.