import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
/**
 * Tools that DOMAINS_MCP_SAFE_MODE=1 keeps enabled. Every name here must be a
 * tool registered in `./index.ts` — `tool-filter.test.ts` pins that, so a
 * renamed or removed tool cannot leave a dead allow-list entry behind.
 */
export declare const READ_ONLY_TOOLS: ReadonlySet<string>;
export declare function isReadOnlyMcpTool(name: string): boolean;
export declare function applySafeModeToolFilter(server: McpServer, env?: Record<string, string | undefined>): void;
//# sourceMappingURL=tool-filter.d.ts.map