Documentation / @agentick/mcp / AllowListGuardOptions

Interface: AllowListGuardOptions

Defined in: server/security/stages.ts:336

Properties

origins?

optional origins: string[]

Defined in: server/security/stages.ts:344

Allowed origin header values. Exact match or glob pattern (* wildcard). Example: ["https://app.example.com", "https://*.example.com"]

If set, the origin must match at least one pattern. If unset, origin is not checked.

---

remoteAddresses?

optional remoteAddresses: string[]

Defined in: server/security/stages.ts:354

Allowed remote IP addresses or CIDR ranges. Supports IPv4 exact, IPv4 CIDR, IPv6 exact, IPv6 CIDR. Example: ["127.0.0.1", "10.0.0.0/8", "::1", "fc00::/7"]

If set, the remoteAddress must match at least one entry. If unset, remoteAddress is not checked.

---

requireBoth?

optional requireBoth: boolean

Defined in: server/security/stages.ts:360

If true, requires BOTH origin and remoteAddress checks to pass. If false (default), passes if EITHER check passes (or if only one is configured).