# Config version (required)
version: 1

# Default settings for all servers
defaults:
  action: prompt          # Default action: allow, deny, prompt
  timeout: 60000          # Approval timeout in ms
  sessionDuration: 300000 # Default session grant in ms

# MCP server configurations
servers:
  server-name:
    command: string       # Command to run (required)
    args: [string]        # Command arguments
    env:                  # Environment variables
      KEY: value
    policies:             # Policy rules
      - tools: [string]   # Tool names or patterns
        action: string    # Action: allow, deny, prompt
        paths:            # Path-based rules (filesystem)
          allow: [string]
          deny: [string]

# Tool shadowing detection
toolShadowing:
  enabled: boolean        # Enable detection (default: true)
  checkDescriptions: boolean # Check for injection in descriptions
  detectMutations: boolean   # Detect mid-session changes

# Audit logging settings
audit:
  enabled: boolean        # Enable audit logging
  redactPII: boolean      # Redact sensitive data

version: 1

servers:
  postgres:
    command: npx
    args: ["-y", "@modelcontextprotocol/server-postgres"]

version: 1

defaults:
  action: prompt
  timeout: 60000

servers:
  postgres:
    command: npx
    args: ["-y", "@modelcontextprotocol/server-postgres"]
    env:
      DATABASE_URL: postgres://localhost/dev
    policies:
      - tools: ["query", "select"]
        action: allow
      - tools: ["insert", "update"]
        action: prompt
      - tools: ["drop_*", "delete_*"]
        action: deny

  filesystem:
    command: npx
    args: ["-y", "@anthropic/mcp-server-filesystem", "./"]
    policies:
      - tools: ["read_file", "list_directory"]
        action: allow
      - tools: ["write_file"]
        action: prompt
        paths:
          allow:
            - ./src/**
            - ./test/**
          deny:
            - /.*
            - ~/.ssh/**
            - **/.env*
      - tools: ["delete_file"]
        action: deny

toolShadowing:
  enabled: true
  checkDescriptions: true
  detectMutations: true

audit:
  enabled: true
  redactPII: true

version: 1

defaults:
  action: deny  # Deny by default in production
  timeout: 30000

servers:
  postgres:
    command: npx
    args: ["-y", "@modelcontextprotocol/server-postgres"]
    policies:
      - tools: ["query", "select"]
        action: allow
      - tools: ["*"]
        action: deny

toolShadowing:
  enabled: true
  checkDescriptions: true
  detectMutations: true

audit:
  enabled: true
  redactPII: true

servers:
  postgres:
    env:
      DATABASE_URL: ${DATABASE_URL}

overwatch policies validate

overwatch doctor