mcp_servers.<id>.http_headers: static headers for MCP HTTP servers. mcp_servers.

mcp_servers.<id>.required: fail startup/resume if that server is unavailable.

mcp_servers.<id>.startup_timeout_ms: millisecond alias of startup timeout.

mcp_servers.<id>.tool_timeout_sec: per-tool MCP timeout.

mcp_servers.<id>.enabled_tools: allowlist exposed MCP tools.

mcp_servers.<id>.disabled_tools: denylist exposed MCP tools.

mcp_servers.<id>.scopes: OAuth scopes to request.

mcp_servers.<id>.oauth_resource: optional OAuth resource parameter.

agents.max_threads: maximum concurrent agent threads.

agents.max_depth: maximum nested agent depth.

agents.job_max_runtime_seconds: default worker runtime for agent jobs.

agents.<name>.description: role guidance for a named agent type.

agents.<name>.config_file: TOML overlay file for that agent role.

agents.<name>.nickname_candidates: display nicknames for that role.

approval_policy.granular.sandbox_approval: allow sandbox escalation prompts.

approval_policy.granular.rules: allow prompts triggered by execpolicy rules.

approval_policy.granular.mcp_elicitations: allow MCP elicitation prompts.

approval_policy.granular.request_permissions: allow request_permissions prompts.