DANGEROUSLY_ENABLE_PROJECT_MCP_SERVERS = 'DEEPAGENTS_CODE_DANGEROUSLY_ENABLE_PROJECT_MCP_SERVERS'Comma-separated project MCP server names to dangerously pre-approve by name.
This is an explicit process-wide escape hatch. Servers named here load from an
otherwise-untrusted project .mcp.json without prompting (they are omitted from
the interactive approval prompt), while non-listed servers still require
approval (they go through the prompt, and stay dropped only on the
non-interactive or denied paths). Like
DISABLED_PROJECT_MCP_SERVERS, this is user-controlled process env, not a repo
file, so it does not weaken the user-level-only trust boundary (a committed
project .env cannot set it; see config._PROJECT_DOTENV_DENIED_ENV_KEYS).
This dangerous contract is name-based: a different project, command change, or
URL change under the same server name still matches.
This process-wide allowlist and the scoped
[mcp].enabled_project_server_approvals TOML approvals are independent grants.
Setting this variable, including to an empty value, does not suppress remembered
project approvals. (DISABLED_PROJECT_MCP_SERVERS instead unions with its
TOML list, so a deny is never silently emptied.)