[ '*', ], /* |-------------------------------------------------------------------------- | Allowed Custom Schemes |-------------------------------------------------------------------------- | | Native desktop OAuth clients like Cursor and VS Code use private-use URI | schemes (RFC 8252) for redirect callbacks instead of standard schemes | like HTTPS. Here, you may list which custom schemes you will allow. | */ 'custom_schemes' => [ 'antigravity', 'chatgpt', 'claude', 'claude-cli', 'claude-code', 'claude-desktop', 'claudeai', 'codex', 'codium', 'continue', 'cursor', 'devin', 'goose', 'grok', 'hermes', 'jetbrains', 'kiro', 'lmstudio', 'opencode', 'raycast', 'trae', 'vscode', 'vscode-insiders', 'warp', 'windsurf', 'xai', 'zed', ], /* |-------------------------------------------------------------------------- | Authorization Server |-------------------------------------------------------------------------- | | Here you may configure the OAuth authorization server issuer identifier | per RFC 8414. This value appears in your protected resource and auth | server metadata endpoints. When null, this defaults to `url('/')`. | */ 'authorization_server' => null, /* |-------------------------------------------------------------------------- | Tool Search |-------------------------------------------------------------------------- | | Here you may configure the limits enforced during tool search. The maximum | number of tool calls limits how many tools each search request can run | while the maximum output bytes value caps the size of every result. | */ 'tool_search' => [ 'max_tool_calls' => 10, 'max_output_bytes' => 65_536, ], ];