Full schema
[start]
[limits]
The global execution ceiling. Any one limit stopping the agent stops the entire run.
Named limit sets —
[limits.<name>] inherits all fields from [limits] and overrides only the fields it declares:
@agent("researcher") (Python) or #[nanny::agent("researcher")] (Rust).
[tools]
Per-tool configuration — [tools.<name>]
The tool name in
[tools.<name>] must exactly match the function name used in the @tool decorator or #[nanny::tool] macro.
[observability]
[proxy]
Optional. Enables HTTP CONNECT proxy mode on the governance server. Proxy mode is active only whenallowed_hosts is present and non-empty. An empty list — or omitting [proxy] entirely — disables proxy mode.
The CONNECT tunnel authenticates with its own
proxy_token, separate from the ordinary session token. nanny run --serve/--join inject it automatically, so nothing in this section needs a credential.
See HTTP proxy mode for full details.
Cloud sync
Cloud sync has no config block. It turns on for any machine that’s logged in viananny auth login, no separate field to flip. No key, endpoint, or org lives in nanny.toml: login handles the credential, so your committed config never holds a secret.
See Connect to Nanny Cloud for the full flow, including the --token path for CI and headless machines.