intutic_mcp_server_decision Cloud

The operator decision on one MCP server in the workspace's registry: approve or block it, and switch individual tools off. The server must already be in the registry, which happens when an MCP proxy first reports it; to allow a server before any proxy has seen it, list it in the mcpAllowedServers workspace setting instead. Terraform never approves a server that a high-risk tool-set change returned to review: approve that one after reviewing the change, and the next plan is clean. Destroying the resource returns the server to the approval queue and re-enables the tools it disabled. Needs an OWNER or ADMIN key.

Example Usage

resource "intutic_mcp_server_decision" "github" {
  server_name    = "github"
  status         = "approved"
  disabled_tools = ["delete_repository"]
}

Schema

Required

• server_name (String) The server's name as the MCP proxy reports it.
• status (String) One of approved, blocked, candidate (back in the approval queue).

Optional

• disabled_tools (Set of String) Exactly the tools to switch off on this server; every other tool is switched on. Unset leaves the tool switches alone.

Read-Only

• held_for_review (Boolean) Whether a high-risk tool-set change returned the server to review.
• id (String) The registry's server id (mcpsrv_…).
• tools (List of String) The tools a proxy last saw the server declare.

Import

# Import by server name, as the MCP proxy reports it.
terraform import intutic_mcp_server_decision.github github