export interface GlitchMcpConfig {
    /**
     * Base URL for the paid Glitch MCP facade.
     *
     * The public MCP adapter calls this hosted service. Core planner/executor
     * logic, subscription checks, and title permissions stay server-side.
     */
    readonly apiBaseUrl: string;
    /** Optional bearer token for clients that cannot use OAuth. */
    readonly token?: string;
    /** Optional default title used when a tool call omits title_id. */
    readonly defaultTitleId?: string;
    /** Base URL for human-facing Glitch dashboard deep links. */
    readonly dashboardBaseUrl: string;
    /** HTTP request timeout for hosted Glitch calls. */
    readonly timeoutMs: number;
    /** Optional client label added to outbound headers for support/auditing. */
    readonly clientName: string;
    /**
     * Whether the glitch_upload_file tool may read files from the local disk.
     *
     * Tri-state: undefined means "use the transport default" (true for stdio on a
     * developer's machine, false for the shared HTTP server). Set
     * GLITCH_MCP_ALLOW_LOCAL_FILE_READS to override either way.
     */
    readonly allowLocalFileReads?: boolean;
    /**
     * Optional allow-list of directories for stdio file uploads.
     *
     * When set, glitch_upload_file only reads file_path values whose real path is
     * inside one of these roots. Leave unset to preserve the local stdio default.
     */
    readonly uploadAllowedRoots?: string[];
    /** Hostnames allowed for DNS-rebinding protection when bound to 0.0.0.0/::. */
    readonly allowedHosts?: string[];
    /** Optional edge rate limit for the HTTP server (requests/min/credential). 0/undefined disables. */
    readonly rateLimitPerMinute?: number;
    /** Optional OAuth resource-server discovery. Disabled by default; token auth still works. */
    readonly oauthEnabled?: boolean;
    /** OAuth authorization server (issuer) advertised in protected-resource metadata. */
    readonly oauthIssuer?: string;
    /** Canonical URL of this MCP resource server, advertised in metadata. */
    readonly oauthResourceUrl?: string;
    /** Scopes advertised in protected-resource metadata. */
    readonly oauthScopes?: string[];
}
export declare function loadConfig(env?: NodeJS.ProcessEnv): GlitchMcpConfig;