/** LiteLLM's documented value that denies every MCP server. */
export declare const NO_MCP_SERVERS = "no-mcp-servers";
/**
 * MCP servers a team may bind to a key: exactly the team's own list, as stored
 * (LiteLLM accepts a server's name or id interchangeably when enforcing). A team
 * with no list gets nothing: "empty" means unrestricted to LiteLLM, but a key
 * list is a grant, so an unrestricted team must not let a member name servers it
 * was never given. Entries the mint schema would reject are dropped so the
 * picker never offers an unselectable name.
 *
 * shortcut: team `mcp_access_groups` are not expanded into server names; add
 * that when a team grants MCP access only through groups.
 */
export declare function teamMcpServers(team: {
    object_permission?: {
        mcp_servers?: string[];
    };
} | undefined): string[];
/** Requested names that are not in `allowed`, de-duplicated. */
export declare function findDisallowedMcpServers(requested: string[], allowed: string[]): string[];