miftah/examples/github.miftah.json at development · mohanagy/miftah · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
{
  "version": "3",
  "name": "github",
  "description": "GitHub MCP wrapped by Miftah",
  "defaultProfile": "work",
  "upstream": {
    "transport": "stdio",
    "command": "docker",
    "args": [
      "run",
      "-i",
      "--rm",
      "-e",
      "GITHUB_PERSONAL_ACCESS_TOKEN",
      "ghcr.io/github/github-mcp-server:v1.5.0",
      "stdio",
      "--read-only",
      "--toolsets=repos,issues,pull_requests"
    ]
  },
  "profiles": {
    "work": {
      "description": "Work GitHub account",
      "env": {
        "GITHUB_PERSONAL_ACCESS_TOKEN": "${GITHUB_WORK_TOKEN}"
      },
      "policy": "readonly"
    },
    "personal": {
      "description": "Personal GitHub account",
      "env": {
        "GITHUB_PERSONAL_ACCESS_TOKEN": "${GITHUB_PERSONAL_TOKEN}"
      },
      "policy": "readonly"
    }
  },
  "policies": {
    "readonly": {
      "allowRisk": [
        "read"
      ],
      "denyRisk": [
        "write",
        "destructive"
      ]
    }
  },
  "routing": {
    "mode": "hybrid",
    "fallback": "activeProfile",
    "rules": []
  },
  "security": {
    "allowProfileSwitchingFromMcp": true,
    "requireExplicitProfileForDestructive": true,
    "requireProfileSwitchConfirmation": true,
    "requireExplicitSelectionForDestructive": true
  },
  "secrets": {
    "allowPlaintextSecrets": false
  },
  "process": {
    "startupTimeoutMs": 30000
  },
  "audit": {
    "enabled": true,
    "path": "~/.local/state/miftah/audit.jsonl",
    "format": "jsonl",
    "includeArguments": false,
    "failureMode": "fail-closed"
  },
  "tooling": {
    "collisionStrategy": "prefix-upstream"
  }
}