export type MCPSecurityErrorCode = 'COMMAND_DENIED' | 'URL_DENIED' | 'SCHEME_DENIED';
export declare class MCPSecurityError extends Error {
    readonly code: MCPSecurityErrorCode;
    constructor(code: MCPSecurityErrorCode, message: string);
}
export declare const DEFAULT_ENV_ALLOWLIST: string[];
export declare const validateCommand: (command: string, allowedCommands?: string[]) => void;
export declare const validateUrl: (url: string, allowedHosts?: string[], allowedSchemes?: string[]) => void;
export declare const filterEnv: (envAllowlist?: string[], explicitEnv?: Record<string, string>) => Record<string, string>;
//# sourceMappingURL=security.d.ts.map