/**
 * Server authentication configuration
 * Controls which MCP servers can be attached via federation
 */
export interface ServerAuthConfig {
    /** Allow attaching to any server (DANGEROUS - only for development) */
    allowAnyServer?: boolean;
    /** List of allowed server patterns (supports wildcards) */
    allowedServers?: string[];
    /** List of blocked server patterns (takes precedence over allowed) */
    blockedServers?: string[];
    /** Require HTTPS/WSS for production mode */
    requireSecureTransport?: boolean;
    /** Maximum number of servers that can be attached */
    maxAttachedServers?: number;
}
/**
 * Default authentication configuration
 */
export declare const defaultAuthConfig: ServerAuthConfig;
/**
 * Check if a server URL is allowed
 */
export declare function isServerAllowed(url: string, config?: ServerAuthConfig): {
    allowed: boolean;
    reason?: string;
};
/**
 * Load auth configuration from environment or config file
 */
export declare function loadAuthConfig(): ServerAuthConfig;
//# sourceMappingURL=server-auth.config.d.ts.map