Set a security policy key
security_setIdempotent
Set security and policy settings (allow/deny, tool lists, CSP origins) for reserved keys that generic data tools refuse. Validates values, rejecting unknown input.
Instructions
Privileged writer for reserved settings keys (security:* / policy:) — the ONLY tool that can write them; the generic data_ tools refuse reserved keys. Upserts one key/value in the settings collection.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| key | Yes | a reserved key, e.g. security:kanban:send_message (cap suffixes are snake_case — the caps field names) | |
| value | Yes | the policy value: allow | deny (true/false too); delete_items also takes confirm; call_tools takes "*", a JSON array or a comma-separated tool list; policy:csp:<app> (or policy:csp:*) takes a JSON object of origin arrays, e.g. {"connectDomains":["https://api.example.com"]}. An unknown value is REFUSED, never stored | |
| command_id | No | idempotency key (uuid); auto-generated if omitted |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | No | ||
| ok | Yes | ||
| eot | No | ||
| seq | No | ||
| item | No | ||
| note | No | ||
| reason | No | ||
| deleted | No | ||
| collection | No | ||
| violations | No | ||
| expected_version | No | ||
| prev_collection_seq | No |