{
  "authProviders": [
    {
      "id": "company",
      "type": "oidc",
      "issuer": "https://auth.example.com/t/company",
      "clientId": "gate-one",
      "clientSecretEnv": "MYCOMPANY_OIDC_SECRET",
      "loginBaseUrl": "https://login.example.com",
      "cookieDomain": "example.com",
      "sessionKeyEnv": "MYCOMPANY_SESSION_KEY"
    }
  ],
  "defaultAuthProvider": "company",
  "mcpDefaults": {
    "scope": "mcp-tools"
  },
  "tokenBroker": {
    "url": "http://token-broker:4000",
    "secretEnv": "TOKEN_BROKER_SHARED_SECRET",
    "links": {
      "services": {
        "label": "Services",
        "url": "https://login.example.com/connections"
      }
    }
  },
  "mcpSets": {
    "developer-tools": {
      "host": "mcp.example.com",
      "endpoint": "/developer-tools",
      "resource": "https://mcp.example.com/developer-tools",
      "scope": "mcp-tools",
      "identity": {
        "roles": [
          "developer"
        ]
      },
      "members": [
        {
          "service": "github",
          "path": "/github",
          "tools": [
            "list_repos",
            "get_repo"
          ]
        },
        {
          "service": "metrics",
          "path": "/metrics"
        }
      ]
    }
  },
  "routes": [
    {
      "host": "api.example.com",
      "path": "/github/*",
      "stripPrefix": "/github",
      "backend": "https://api.github.com",
      "auth": {},
      "upstream": {
        "host": true,
        "tokenBroker": {
          "provider": "github"
        }
      }
    },
    {
      "host": "mcp.example.com",
      "path": "/github",
      "backend": "https://api.github.com",
      "auth": {},
      "upstream": {
        "tokenBroker": {
          "provider": "github"
        }
      },
      "openapi": {
        "url": "http://landing/github-openapi.json",
        "public": false
      },
      "mcp": {
        "enabled": true,
        "name": "github",
        "standalone": false,
        "operations": [
          {
            "name": "list_repos",
            "operationId": "list_repos"
          },
          {
            "name": "get_repo",
            "operationId": "get_repo"
          },
          {
            "name": "list_issues",
            "operationId": "list_issues"
          }
        ]
      }
    },
    {
      "host": "mcp.example.com",
      "path": "/metrics",
      "backend": "http://metrics-mcp:8080",
      "auth": {},
      "mcp": {
        "enabled": true,
        "name": "metrics",
        "standalone": false,
        "upstream": {
          "url": "http://metrics-mcp:8080/mcp",
          "tools": {
            "include": [
              "list_*",
              "get_*"
            ],
            "exclude": [
              "*_secret"
            ]
          }
        }
      }
    }
  ]
}