OptionalincludeGlob or exact-match patterns selecting which tools from the MCP server
to expose. Prefix match for patterns with *, exact match otherwise.
An empty list means all tools are included. Per-element max 256 chars.
OptionalratePer-principal rate limits applied to tool invocations routed through this
MCP service. Repeated to support per-USER / USER_GROUP / SERVICE_PRINCIPAL
/ SERVICE / USER_DEFAULT scopes simultaneously, mirroring the
ModelServiceConfig.rate_limits shape. Empty when no rate limit is
configured.
OptionalsourcePolymorphic reference to where the MCP server lives. MCP_SERVICE is a
single-kind securable (MCP_SERVICE_STANDARD) with two source variants:
source_connection (a UC Connection FQN) and internal (a
JSON shape: the active oneof variant appears as a sibling field on
config (proto JSON does not nest the oneof container name). E.g.:
{ "config": {
"source_connection": {"name": "connections/main.default.gh"},
"include_tool_selectors": ["read_*"], ...
} }
{ "config": { "internal": {"server": "sandbox"}, ... } }
Future variants slot in the same way: {"config": {"app": {...}, ...}},
{"config": {"genie": {...}, ...}}, etc.
(-- The oneof shape lets future kinds add type-specific reference shapes
without a wire-format bump. --)
UC Connection referencing the MCP server.
Operational configuration for an MCP service. Groups the source reference, tool selectors, and rate limit -- the fields that configure how the MCP service behaves at invocation time.