/**
 * Tools denied via Gateway HTTP tool invoke endpoints by default.
 *
 * These are high-risk because they enable command execution, file mutation,
 * session orchestration, or control-plane actions that don't belong on a
 * non-interactive HTTP surface.
 */
export declare const DEFAULT_GATEWAY_HTTP_TOOL_DENY: readonly string[];
/**
 * Check whether a tool name is in the default HTTP deny list.
 */
export declare function isDangerousHttpTool(toolName: string): boolean;
/**
 * Filter a list of tool names, removing those on the HTTP deny list.
 * Returns only the safe tools.
 */
export declare function filterDangerousHttpTools(toolNames: string[]): {
    allowed: string[];
    denied: string[];
};