DISABLED_PROJECT_MCP_SERVERS

Comma-separated project MCP server names to always reject by name.

A user-level equivalent of [mcp].disabled_project_servers.

Rejection wins over approval: a name listed here is dropped even when it also appears in DANGEROUSLY_ENABLE_PROJECT_MCP_SERVERS or in a scoped [mcp].enabled_project_server_approvals entry, and even when the project config is otherwise trusted. Unlike the enabled list, this env var unions with (rather than replaces) [mcp].disabled_project_servers — denies accumulate across sources, so neither can silently empty a deny set in the other. This is process env the user controls, not a repo file, so it does not weaken the user-level-only trust boundary: a committed project .env is blocked from setting it (see config._PROJECT_DOTENV_DENIED_ENV_KEYS); only the user's shell, launch env, or global ~/.deepagents/.env can.