local_ydb_prepare_auth_config
Generates a hardened YDB config from the static-node config for auth hardening. Returns a preview unless confirm=true is passed.
Instructions
Generate a hardened YDB config from the current static-node config. Use before local_ydb_write_dynamic_auth_config and local_ydb_apply_auth_hardening; without confirm=true this returns the planned write only.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| profile | No | Named profile from local-ydb.config.json. Defaults to config.defaultProfile. | |
| configPath | No | Explicit local-ydb config file path to load for this tool call. Useful when the MCP server should pick up a different config without restart. | |
| confirm | No | Must be true to write the hardened config file. Omit or false for plan-only output. | |
| configHostPath | No | Host path for the generated hardened config. Defaults to profile.authConfigPath when present. | |
| sid | No | SID to place into viewer, monitoring, administration, and register_dynamic_node_allowed_sids. Defaults to profile.dynamicNodeAuthSid or root@builtin. |