set_config
Configure runtime settings for agent-tool, including file encoding, security policies, network options, and workspace directories. Call without arguments to view current configuration.
Instructions
Changes agent-tool runtime configuration. Supports: fallback_encoding, encoding_warnings, max_file_size_mb, allow_symlinks, workspace. SSRF policy: allow_http_private, allow_mysql_private, allow_redis_private, allow_ssh_private. Network: enable_doh (DNS over HTTPS), enable_ech (Encrypted Client Hello). Call with no arguments to view current configuration. Example: set fallback_encoding to "EUC-KR" for Korean legacy projects.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| fallback_encoding | No | Set the fallback encoding for files when auto-detection fails. Examples: EUC-KR, Shift_JIS, ISO-8859-1. Empty = no change | |
| encoding_warnings | No | Enable/disable encoding detection warning messages in tool results. Default: true | |
| max_file_size_mb | No | Maximum file size in MB that read/edit/grep tools will accept. Min: 1, Default: 50 | |
| allow_symlinks | No | Allow creating symlinks when extracting archives. Default: false (skipped for security) | |
| workspace | No | Set the default workspace/project root directory. Used by glob when no explicit path is given. Must be an absolute path to an existing directory | |
| allow_http_private | No | Allow webfetch/download/httpreq to access private IPs (127.x, 192.168.x, 10.x). Default: false (blocked). Cloud metadata IPs always blocked | |
| allow_mysql_private | No | Allow mysql tool to access private IPs. Default: true. Cloud metadata IPs always blocked | |
| allow_redis_private | No | Allow redis tool to access private IPs. Default: true. Cloud metadata IPs always blocked | |
| allow_ssh_private | No | Allow ssh/sftp tools to access private IPs. Default: true. Cloud metadata IPs always blocked | |
| enable_doh | No | Enable DNS over HTTPS globally for webfetch/download/httpreq/dnslookup. Default: true. Per-request no_doh/use_doh can still override | |
| enable_ech | No | Enable Encrypted Client Hello globally for webfetch/download/httpreq. Default: true. Per-request no_ech can still override |