Struct ServerEntry 

pub struct ServerEntry {

    pub id: String,
    pub transport: McpTransport,
    pub timeout: Duration,
    pub trust_level: McpTrustLevel,
    pub tool_allowlist: Option<Vec<String>>,
    pub allow_untrusted_without_allowlist: bool,
    pub expected_tools: Vec<String>,
    pub roots: Vec<Root>,
    pub tool_metadata: HashMap<String, ToolSecurityMeta>,
    pub elicitation_enabled: bool,
    pub elicitation_timeout_secs: u64,
    pub env_isolation: bool,
    pub media_passthrough: bool,
}

Connection parameters for a single MCP server consumed by McpManager.

Deserialized from the [[mcp.servers]] TOML config table or constructed programmatically for tests. All fields except id and transport have reasonable defaults via #[serde(default)].

Trust semantics

The combination of trust_level, tool_allowlist, expected_tools, and allow_untrusted_without_allowlist controls which tools are exposed to the agent:

• Trusted — all tools are exposed; SSRF and data-flow checks are relaxed.
• Untrusted + no allowlist — fails closed: zero tools exposed, unless allow_untrusted_without_allowlist is true (opt-in escape hatch that keeps the full untrusted pipeline — SSRF, sanitization, injection detection, attestation — while exposing all tools).
• Untrusted + allowlist — only listed tools are exposed.
• Sandboxed + allowlist — only listed tools; empty allowlist = no tools.
• Sandboxed + no allowlist — no tools exposed (fail closed unconditionally; allow_untrusted_without_allowlist has no effect on Sandboxed).

Fields

id: String

transport: McpTransport

timeout: Duration

trust_level: McpTrustLevel

Trust level for this server. Controls SSRF validation and tool filtering. Trusted skips SSRF checks (for operator-controlled static config).

tool_allowlist: Option<Vec<String>>

Tool allowlist. None means no override (inherit from config or deny by default). Some(vec![]) is an explicit empty list. See McpTrustLevel for per-level semantics.

allow_untrusted_without_allowlist: bool

Explicit opt-in to expose all tools for an Untrusted server with no tool_allowlist declared. Default: false (secure by default — fails closed). Mirrors McpServerConfig::allow_untrusted_without_allowlist.

expected_tools: Vec<String>

Expected tool names for attestation. When non-empty, tools outside this list are filtered (Untrusted/Sandboxed) or warned (Trusted).

roots: Vec<Root>

Filesystem roots to advertise to the server via roots/list.

rmcp::model::Root is deprecated by SEP-2577 but still functional — see crate::roots for the construction-helper boundary that isolates this.

tool_metadata: HashMap<String, ToolSecurityMeta>

Per-tool security metadata overrides. Keys are tool names. When absent for a tool, metadata is inferred from the tool name via heuristics.

elicitation_enabled: bool

Whether this server is allowed to send elicitation requests. Overrides the global elicitation_enabled config. Sandboxed servers always have elicitation disabled regardless of this flag.

elicitation_timeout_secs: u64

Timeout in seconds for the user to respond to an elicitation request.

env_isolation: bool

When true, spawn this Stdio server with an isolated environment: only the minimal base env vars (PATH, HOME, etc.) plus this server’s declared env map are passed.

Default: false (backward compatible).

media_passthrough: bool

Opt-in: decode and attach images this server returns as native MessagePart::Image siblings for vision-capable providers (spec-072). Mirrors McpServerConfig::media_passthrough. Always hard-blocked when trust_level == McpTrustLevel::Sandboxed, regardless of this flag. Default: false.

Trait Implementations

impl Clone for ServerEntry

fn clone(&self) -> ServerEntry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServerEntry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ServerEntry

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ServerEntry

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.