tool = "http_fetch" mode = "ask" max_taint = "secret" result_class = "public" untrusted = false expires = "2026-12-31T00:00:00.000Z" secret = "example-api-token" [constraints] paths = ["/home/kyle/notes/**"] hosts = ["example.com", "api.example.com"] patterns = ["^GET "]