local_ydb_prepare_auth_config
Generate a hardened YDB auth configuration from the current static-node config. Use confirm=true to write the file; omit for plan-only preview.
Instructions
Generate a hardened YDB config from the current static-node config. Use before local_ydb_write_dynamic_auth_config and local_ydb_apply_auth_hardening; without confirm=true this returns the planned write only.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| sid | No | SID to place into viewer, monitoring, administration, and register_dynamic_node_allowed_sids. Defaults to profile.dynamicNodeAuthSid or root@builtin. | |
| confirm | No | Must be true to write the hardened config file. Omit or false for plan-only output. | |
| profile | No | Named profile from local-ydb.config.json. Defaults to config.defaultProfile. | |
| configPath | No | Explicit local-ydb config file path to load for this tool call. Useful when the MCP server should pick up a different config without restart. | |
| configHostPath | No | Host path for the generated hardened config. Defaults to profile.authConfigPath when present. |