# Sofos Configuration Example

# MCP Servers
# Configure external tools via Model Context Protocol

# Filesystem server
[mcp-servers.filesystem]
command = "npx"
args = ["-y", "@modelcontextprotocol/server-filesystem", "/Users/username/Documents"]

# Company internal server with environment variables
[mcp-servers.company-internal]
command = "/usr/local/bin/company-mcp-server"
args = ["--config", "/etc/company/mcp-config.json"]
env = { "COMPANY_API_URL" = "https://internal.company.com" }

# Database with credentials
[mcp-servers.postgres]
command = "npx"
args = ["-y", "@modelcontextprotocol/server-postgres", "postgresql://localhost/mydb"]
env = { "PGPASSWORD" = "secret123" }

# Remote API server (HTTP)
[mcp-servers.api]
url = "https://api.example.com/mcp"
headers = { "Authorization" = "Bearer token123" }

# Permissions
[permissions]
allow = [
  # Files outside workspace
  "Read(~/.zshrc)",
  "Read(~/.config/**)",
  
  # Custom bash commands
  # "Bash(custom_command)",
]

deny = [
  # Block specific files
  "Read(./.env)",
  "Read(./secrets/**)",
]

ask = []
