tool = "http_fetch" mode = "auto" max_taint = "private" secret = "api-token" [constraints] hosts = ["api.example.com"] patterns = ["^GET "]