Skip to main content

Full schema


[start]


[limits]

The global execution ceiling. Any one limit stopping the agent stops the entire run. Named limit sets[limits.<name>] inherits all fields from [limits] and overrides only the fields it declares:
Activate a named set from the CLI:
Or from inside agent code using @agent("researcher") (Python) or #[nanny::agent("researcher")] (Rust).

[tools]

Per-tool configuration — [tools.<name>]

The tool name in [tools.<name>] must exactly match the function name used in the @tool decorator or #[nanny::tool] macro.

[observability]


[proxy]

Optional. Enables HTTP CONNECT proxy mode on the governance server. Proxy mode is active only when allowed_hosts is present and non-empty. An empty list — or omitting [proxy] entirely — disables proxy mode. The CONNECT tunnel authenticates with its own proxy_token, separate from the ordinary session token. nanny run --serve/--join inject it automatically, so nothing in this section needs a credential. See HTTP proxy mode for full details.

Cloud sync

Cloud sync has no config block. It turns on for any machine that’s logged in via nanny auth login, no separate field to flip. No key, endpoint, or org lives in nanny.toml: login handles the credential, so your committed config never holds a secret. See Connect to Nanny Cloud for the full flow, including the --token path for CI and headless machines.