Skip to content

docs(mcp): document mcpAutonomyUrlOverrides managed setting#1179

Open
factory-ain3sh wants to merge 3 commits into
mainfrom
cli-730
Open

docs(mcp): document mcpAutonomyUrlOverrides managed setting#1179
factory-ain3sh wants to merge 3 commits into
mainfrom
cli-730

Conversation

@factory-ain3sh
Copy link
Copy Markdown
Contributor

@factory-ain3sh factory-ain3sh commented May 31, 2026

Description

Adds admin-facing documentation for the org-managed mcpAutonomyUrlOverrides setting, which shipped in the managed-settings schema (factory-mono #14150) without public docs. The new "MCP autonomy URL overrides" subsection in cli/configuration/mcp.mdx documents the URL-rule shape (urlPattern + defaultLevel), the matching/precedence behavior, and frames it as an admin-managed (MDM) setting alongside the existing mcpPolicy docs. Placed in mcp.mdx to follow the established pattern where MCP managed settings live next to mcpPolicy rather than in the hierarchical-settings schema list.

Also replaces stale mint.json references in docs/README.md with docs.json (the deprecated mint CLI used mint.json; the current mintlify CLI uses docs.json).

Related Issue

Closes CLI-730

Follow-up flagged in review of factory-mono #14150 (pre-pr-checklist requires public docs for new config options).

Reviewer Guide

Read order: docs/cli/configuration/mcp.mdx (the new ## MCP autonomy URL overrides section) > docs/README.md (2-line tooling-config fix).
Review depth: Standard — verify the documented behavior matches the source in apps/cli/src/agent/shouldConfirmExecution.ts (resolveMcpUrlAutonomyOverride) and the schema in packages/common/src/settings/schema.ts.
Open for pushback: placement in mcp.mdx vs. the hierarchical-settings schema list — chose mcp.mdx for consistency with mcpPolicy.

Risk & Impact

Low risk — documentation only, no code or schema changes. The one correctness risk is the docs drifting from the implementation; the matching rules (remote-only, first-match-wins, high-always-confirms, non-read-only/destructive escalation, built-in fallback) were taken directly from shouldConfirmExecution.ts.

Verification

Behavior verified. mintlify broken-links run from docs/ passes with no broken links; all pages (including both edited files) parse cleanly. New internal links to /cli/user-guides/auto-run and /enterprise/hierarchical-settings-and-org-control resolve.
Content accuracy. URL-rule shape and precedence behavior cross-checked against McpAutonomyUrlOverrideSchema (schema.ts) and resolveMcpUrlAutonomyOverride / resolveMcpToolImpactLevel (shouldConfirmExecution.ts).
Not tested. No rendered-site visual check beyond link/parse validation — content is a standard table + list + JSON block matching existing page conventions.
Standard validators. mintlify broken-links clean.

@mintlify
Copy link
Copy Markdown
Contributor

mintlify Bot commented May 31, 2026

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated (UTC)
factory 🟢 Ready View Preview May 31, 2026, 7:08 AM

💡 Tip: Enable Workflows to automatically generate PRs for you.

@factory-droid
Copy link
Copy Markdown
Contributor

factory-droid Bot commented May 31, 2026

Droid finished @factory-ain3sh's task —— View job


Validated 1/1 candidate comment for posting; it flags a real internal consistency issue between this page and the Autonomy Level semantics around whether “high risk” always prompts.

Comment thread docs/cli/configuration/mcp.mdx Outdated
factory-ain3sh and others added 2 commits May 31, 2026 00:18
Add admin-facing docs for the org-managed mcpAutonomyUrlOverrides config
option: the URL-rule shape (urlPattern + defaultLevel) and the
matching/precedence behavior (remote-only, first-match-wins, safety
escalation for non-read-only tools, built-in fallback). Closes CLI-730.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
The deprecated mint CLI used mint.json; the current Mintlify CLI uses
docs.json. No mint binary is installed (only mintlify), so this removes
the lingering source of confusion.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
…ding (CLI-730)

A defaultLevel of high sets a tool's risk classification, not an
unconditional prompt; high-risk tools still follow the normal Autonomy
Level comparison. Reword the Safety floor bullet to match auto-run
semantics.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant