feat(config): layered config tool filter — config_denied over user toggles#468

Open

nlaurance wants to merge 11 commits into

smart-mcp-proxy:mainfrom

nlaurance:feat/config-tool-allowlist

Commits on May 18, 2026

feat(config): add enabled_tools/disabled_tools per-server allowlist/denylist

nlaurance
and
claude
committed
feat(config): add IsToolAllowedByConfig helper on ServerConfig
nlaurance
committed
feat(runtime): replace BBolt-writing applyConfigToolFilter with IsToolConfigDenied

nlaurance
and
claude
committed
feat(runtime): skip config-denied tools in SetAllToolsEnabled bulk toggle
nlaurance
committed
feat(server): enforce config tool filter in isToolCallable

nlaurance
and
claude
committed
feat(api): expose config_denied on tool response; reject enabling config-denied tools

nlaurance
and
claude
committed
feat(ui): show locked badge and disable toggle for config-denied tools

nlaurance
and
claude
committed
chore(types): add disabled/config_denied fields to Tool interface

nlaurance
and
claude
committed
fix(storage): persist EnabledTools/DisabledTools fields through BBolt round-trip
nlaurance
committed
chore(oas): regenerate OpenAPI spec with config_denied tool field
nlaurance
committed
chore: trigger GitHub merge-check recalculation
nlaurance
committed