published on Sunday, Oct 25, 2026 by Aten Security
Thothpublished on Sunday, Oct 25, 2026 by Aten Security
Create Vendor Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Vendor(name: string, args: VendorArgs, opts?: CustomResourceOptions);@overload
def Vendor(resource_name: str,
args: VendorArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Vendor(resource_name: str,
opts: Optional[ResourceOptions] = None,
host_patterns: Optional[Sequence[str]] = None,
vendor_id: Optional[str] = None,
display_name: Optional[str] = None,
last_seen_at: Optional[str] = None,
egress_policy_mode: Optional[str] = None,
egress_allowed_host_patterns: Optional[Sequence[str]] = None,
approved: Optional[bool] = None,
manifest_signature_bundle_ref: Optional[str] = None,
manifest_signature_signer: Optional[str] = None,
manifest_signature_status: Optional[str] = None,
manifest_signature_verified_at: Optional[str] = None,
notes: Optional[str] = None,
runtime_identity: Optional[str] = None,
source: Optional[str] = None,
capabilities: Optional[Sequence[str]] = None)func NewVendor(ctx *Context, name string, args VendorArgs, opts ...ResourceOption) (*Vendor, error)public Vendor(string name, VendorArgs args, CustomResourceOptions? opts = null)
public Vendor(String name, VendorArgs args)
public Vendor(String name, VendorArgs args, CustomResourceOptions options)
type: thoth:mcp:Vendor
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "thoth_mcp_vendor" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args VendorArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args VendorArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args VendorArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args VendorArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args VendorArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var vendorResource = new Thoth.Mcp.Vendor("vendorResource", new()
{
HostPatterns = new[]
{
"string",
},
VendorId = "string",
DisplayName = "string",
LastSeenAt = "string",
EgressPolicyMode = "string",
EgressAllowedHostPatterns = new[]
{
"string",
},
Approved = false,
ManifestSignatureBundleRef = "string",
ManifestSignatureSigner = "string",
ManifestSignatureStatus = "string",
ManifestSignatureVerifiedAt = "string",
Notes = "string",
RuntimeIdentity = "string",
Source = "string",
Capabilities = new[]
{
"string",
},
});
example, err := mcp.NewVendor(ctx, "vendorResource", &mcp.VendorArgs{
HostPatterns: pulumi.StringArray{
pulumi.String("string"),
},
VendorId: pulumi.String("string"),
DisplayName: pulumi.String("string"),
LastSeenAt: pulumi.String("string"),
EgressPolicyMode: pulumi.String("string"),
EgressAllowedHostPatterns: pulumi.StringArray{
pulumi.String("string"),
},
Approved: pulumi.Bool(false),
ManifestSignatureBundleRef: pulumi.String("string"),
ManifestSignatureSigner: pulumi.String("string"),
ManifestSignatureStatus: pulumi.String("string"),
ManifestSignatureVerifiedAt: pulumi.String("string"),
Notes: pulumi.String("string"),
RuntimeIdentity: pulumi.String("string"),
Source: pulumi.String("string"),
Capabilities: pulumi.StringArray{
pulumi.String("string"),
},
})
resource "thoth_mcp_vendor" "vendorResource" {
lifecycle {
create_before_destroy = true
}
host_patterns = ["string"]
vendor_id = "string"
display_name = "string"
last_seen_at = "string"
egress_policy_mode = "string"
egress_allowed_host_patterns = ["string"]
approved = false
manifest_signature_bundle_ref = "string"
manifest_signature_signer = "string"
manifest_signature_status = "string"
manifest_signature_verified_at = "string"
notes = "string"
runtime_identity = "string"
source = "string"
capabilities = ["string"]
}
var vendorResource = new Vendor("vendorResource", VendorArgs.builder()
.hostPatterns("string")
.vendorId("string")
.displayName("string")
.lastSeenAt("string")
.egressPolicyMode("string")
.egressAllowedHostPatterns("string")
.approved(false)
.manifestSignatureBundleRef("string")
.manifestSignatureSigner("string")
.manifestSignatureStatus("string")
.manifestSignatureVerifiedAt("string")
.notes("string")
.runtimeIdentity("string")
.source("string")
.capabilities("string")
.build());
vendor_resource = thoth.mcp.Vendor("vendorResource",
host_patterns=["string"],
vendor_id="string",
display_name="string",
last_seen_at="string",
egress_policy_mode="string",
egress_allowed_host_patterns=["string"],
approved=False,
manifest_signature_bundle_ref="string",
manifest_signature_signer="string",
manifest_signature_status="string",
manifest_signature_verified_at="string",
notes="string",
runtime_identity="string",
source="string",
capabilities=["string"])
const vendorResource = new thoth.mcp.Vendor("vendorResource", {
hostPatterns: ["string"],
vendorId: "string",
displayName: "string",
lastSeenAt: "string",
egressPolicyMode: "string",
egressAllowedHostPatterns: ["string"],
approved: false,
manifestSignatureBundleRef: "string",
manifestSignatureSigner: "string",
manifestSignatureStatus: "string",
manifestSignatureVerifiedAt: "string",
notes: "string",
runtimeIdentity: "string",
source: "string",
capabilities: ["string"],
});
type: thoth:mcp:Vendor
properties:
approved: false
capabilities:
- string
displayName: string
egressAllowedHostPatterns:
- string
egressPolicyMode: string
hostPatterns:
- string
lastSeenAt: string
manifestSignatureBundleRef: string
manifestSignatureSigner: string
manifestSignatureStatus: string
manifestSignatureVerifiedAt: string
notes: string
runtimeIdentity: string
source: string
vendorId: string
Vendor Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Vendor resource accepts the following input properties:
- Display
Name string - Human-friendly vendor display name.
- Host
Patterns List<string> - Allowed host patterns for this vendor (for example api.openai.com).
- Vendor
Id string - Stable vendor identifier.
- Approved bool
- Whether this vendor is approved for pass-through MCP host access.
- Capabilities List<string>
- Capability bindings this vendor/runtime identity is allowed to request.
- Egress
Allowed List<string>Host Patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- Egress
Policy stringMode - Egress policy mode for vendor traffic (enforce or observe).
- Last
Seen stringAt - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- Manifest
Signature stringBundle Ref - Signature bundle reference used for manifest verification.
- Manifest
Signature stringSigner - Signer identity for verified manifest signatures.
- Manifest
Signature stringStatus - Manifest signature verification status (verified, pending, failed).
- Manifest
Signature stringVerified At - RFC3339 timestamp when manifest signature was verified.
- Notes string
- Optional reviewer notes for this vendor entry.
- Runtime
Identity string - Capability-scoped runtime identity used at action-time enforcement.
- Source string
- Vendor entry source (for example manual, discovered).
- Display
Name string - Human-friendly vendor display name.
- Host
Patterns []string - Allowed host patterns for this vendor (for example api.openai.com).
- Vendor
Id string - Stable vendor identifier.
- Approved bool
- Whether this vendor is approved for pass-through MCP host access.
- Capabilities []string
- Capability bindings this vendor/runtime identity is allowed to request.
- Egress
Allowed []stringHost Patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- Egress
Policy stringMode - Egress policy mode for vendor traffic (enforce or observe).
- Last
Seen stringAt - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- Manifest
Signature stringBundle Ref - Signature bundle reference used for manifest verification.
- Manifest
Signature stringSigner - Signer identity for verified manifest signatures.
- Manifest
Signature stringStatus - Manifest signature verification status (verified, pending, failed).
- Manifest
Signature stringVerified At - RFC3339 timestamp when manifest signature was verified.
- Notes string
- Optional reviewer notes for this vendor entry.
- Runtime
Identity string - Capability-scoped runtime identity used at action-time enforcement.
- Source string
- Vendor entry source (for example manual, discovered).
- display_
name string - Human-friendly vendor display name.
- host_
patterns list(string) - Allowed host patterns for this vendor (for example api.openai.com).
- vendor_
id string - Stable vendor identifier.
- approved bool
- Whether this vendor is approved for pass-through MCP host access.
- capabilities list(string)
- Capability bindings this vendor/runtime identity is allowed to request.
- egress_
allowed_ list(string)host_ patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- egress_
policy_ stringmode - Egress policy mode for vendor traffic (enforce or observe).
- last_
seen_ stringat - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- manifest_
signature_ stringbundle_ ref - Signature bundle reference used for manifest verification.
- manifest_
signature_ stringsigner - Signer identity for verified manifest signatures.
- manifest_
signature_ stringstatus - Manifest signature verification status (verified, pending, failed).
- manifest_
signature_ stringverified_ at - RFC3339 timestamp when manifest signature was verified.
- notes string
- Optional reviewer notes for this vendor entry.
- runtime_
identity string - Capability-scoped runtime identity used at action-time enforcement.
- source string
- Vendor entry source (for example manual, discovered).
- display
Name String - Human-friendly vendor display name.
- host
Patterns List<String> - Allowed host patterns for this vendor (for example api.openai.com).
- vendor
Id String - Stable vendor identifier.
- approved Boolean
- Whether this vendor is approved for pass-through MCP host access.
- capabilities List<String>
- Capability bindings this vendor/runtime identity is allowed to request.
- egress
Allowed List<String>Host Patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- egress
Policy StringMode - Egress policy mode for vendor traffic (enforce or observe).
- last
Seen StringAt - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- manifest
Signature StringBundle Ref - Signature bundle reference used for manifest verification.
- manifest
Signature StringSigner - Signer identity for verified manifest signatures.
- manifest
Signature StringStatus - Manifest signature verification status (verified, pending, failed).
- manifest
Signature StringVerified At - RFC3339 timestamp when manifest signature was verified.
- notes String
- Optional reviewer notes for this vendor entry.
- runtime
Identity String - Capability-scoped runtime identity used at action-time enforcement.
- source String
- Vendor entry source (for example manual, discovered).
- display
Name string - Human-friendly vendor display name.
- host
Patterns string[] - Allowed host patterns for this vendor (for example api.openai.com).
- vendor
Id string - Stable vendor identifier.
- approved boolean
- Whether this vendor is approved for pass-through MCP host access.
- capabilities string[]
- Capability bindings this vendor/runtime identity is allowed to request.
- egress
Allowed string[]Host Patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- egress
Policy stringMode - Egress policy mode for vendor traffic (enforce or observe).
- last
Seen stringAt - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- manifest
Signature stringBundle Ref - Signature bundle reference used for manifest verification.
- manifest
Signature stringSigner - Signer identity for verified manifest signatures.
- manifest
Signature stringStatus - Manifest signature verification status (verified, pending, failed).
- manifest
Signature stringVerified At - RFC3339 timestamp when manifest signature was verified.
- notes string
- Optional reviewer notes for this vendor entry.
- runtime
Identity string - Capability-scoped runtime identity used at action-time enforcement.
- source string
- Vendor entry source (for example manual, discovered).
- display_
name str - Human-friendly vendor display name.
- host_
patterns Sequence[str] - Allowed host patterns for this vendor (for example api.openai.com).
- vendor_
id str - Stable vendor identifier.
- approved bool
- Whether this vendor is approved for pass-through MCP host access.
- capabilities Sequence[str]
- Capability bindings this vendor/runtime identity is allowed to request.
- egress_
allowed_ Sequence[str]host_ patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- egress_
policy_ strmode - Egress policy mode for vendor traffic (enforce or observe).
- last_
seen_ strat - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- manifest_
signature_ strbundle_ ref - Signature bundle reference used for manifest verification.
- manifest_
signature_ strsigner - Signer identity for verified manifest signatures.
- manifest_
signature_ strstatus - Manifest signature verification status (verified, pending, failed).
- manifest_
signature_ strverified_ at - RFC3339 timestamp when manifest signature was verified.
- notes str
- Optional reviewer notes for this vendor entry.
- runtime_
identity str - Capability-scoped runtime identity used at action-time enforcement.
- source str
- Vendor entry source (for example manual, discovered).
- display
Name String - Human-friendly vendor display name.
- host
Patterns List<String> - Allowed host patterns for this vendor (for example api.openai.com).
- vendor
Id String - Stable vendor identifier.
- approved Boolean
- Whether this vendor is approved for pass-through MCP host access.
- capabilities List<String>
- Capability bindings this vendor/runtime identity is allowed to request.
- egress
Allowed List<String>Host Patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- egress
Policy StringMode - Egress policy mode for vendor traffic (enforce or observe).
- last
Seen StringAt - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- manifest
Signature StringBundle Ref - Signature bundle reference used for manifest verification.
- manifest
Signature StringSigner - Signer identity for verified manifest signatures.
- manifest
Signature StringStatus - Manifest signature verification status (verified, pending, failed).
- manifest
Signature StringVerified At - RFC3339 timestamp when manifest signature was verified.
- notes String
- Optional reviewer notes for this vendor entry.
- runtime
Identity String - Capability-scoped runtime identity used at action-time enforcement.
- source String
- Vendor entry source (for example manual, discovered).
Outputs
All input properties are implicitly available as output properties. Additionally, the Vendor resource produces the following output properties:
- created_
at string - Creation timestamp.
- id string
- The provider-assigned unique ID for this managed resource.
- tenant_
id string - Tenant ID from provider configuration.
- updated_
at string - Last update timestamp.
- created_
at str - Creation timestamp.
- id str
- The provider-assigned unique ID for this managed resource.
- tenant_
id str - Tenant ID from provider configuration.
- updated_
at str - Last update timestamp.
Look up Existing Vendor Resource
Get an existing Vendor resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: VendorState, opts?: CustomResourceOptions): Vendor@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
approved: Optional[bool] = None,
capabilities: Optional[Sequence[str]] = None,
created_at: Optional[str] = None,
display_name: Optional[str] = None,
egress_allowed_host_patterns: Optional[Sequence[str]] = None,
egress_policy_mode: Optional[str] = None,
host_patterns: Optional[Sequence[str]] = None,
last_seen_at: Optional[str] = None,
manifest_signature_bundle_ref: Optional[str] = None,
manifest_signature_signer: Optional[str] = None,
manifest_signature_status: Optional[str] = None,
manifest_signature_verified_at: Optional[str] = None,
notes: Optional[str] = None,
runtime_identity: Optional[str] = None,
source: Optional[str] = None,
tenant_id: Optional[str] = None,
updated_at: Optional[str] = None,
vendor_id: Optional[str] = None) -> Vendorfunc GetVendor(ctx *Context, name string, id IDInput, state *VendorState, opts ...ResourceOption) (*Vendor, error)public static Vendor Get(string name, Input<string> id, VendorState? state, CustomResourceOptions? opts = null)public static Vendor get(String name, Output<String> id, VendorState state, CustomResourceOptions options)resources: _: type: thoth:mcp:Vendor get: id: ${id}import {
to = thoth_mcp_vendor.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Approved bool
- Whether this vendor is approved for pass-through MCP host access.
- Capabilities List<string>
- Capability bindings this vendor/runtime identity is allowed to request.
- Created
At string - Creation timestamp.
- Display
Name string - Human-friendly vendor display name.
- Egress
Allowed List<string>Host Patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- Egress
Policy stringMode - Egress policy mode for vendor traffic (enforce or observe).
- Host
Patterns List<string> - Allowed host patterns for this vendor (for example api.openai.com).
- Last
Seen stringAt - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- Manifest
Signature stringBundle Ref - Signature bundle reference used for manifest verification.
- Manifest
Signature stringSigner - Signer identity for verified manifest signatures.
- Manifest
Signature stringStatus - Manifest signature verification status (verified, pending, failed).
- Manifest
Signature stringVerified At - RFC3339 timestamp when manifest signature was verified.
- Notes string
- Optional reviewer notes for this vendor entry.
- Runtime
Identity string - Capability-scoped runtime identity used at action-time enforcement.
- Source string
- Vendor entry source (for example manual, discovered).
- Tenant
Id string - Tenant ID from provider configuration.
- Updated
At string - Last update timestamp.
- Vendor
Id string - Stable vendor identifier.
- Approved bool
- Whether this vendor is approved for pass-through MCP host access.
- Capabilities []string
- Capability bindings this vendor/runtime identity is allowed to request.
- Created
At string - Creation timestamp.
- Display
Name string - Human-friendly vendor display name.
- Egress
Allowed []stringHost Patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- Egress
Policy stringMode - Egress policy mode for vendor traffic (enforce or observe).
- Host
Patterns []string - Allowed host patterns for this vendor (for example api.openai.com).
- Last
Seen stringAt - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- Manifest
Signature stringBundle Ref - Signature bundle reference used for manifest verification.
- Manifest
Signature stringSigner - Signer identity for verified manifest signatures.
- Manifest
Signature stringStatus - Manifest signature verification status (verified, pending, failed).
- Manifest
Signature stringVerified At - RFC3339 timestamp when manifest signature was verified.
- Notes string
- Optional reviewer notes for this vendor entry.
- Runtime
Identity string - Capability-scoped runtime identity used at action-time enforcement.
- Source string
- Vendor entry source (for example manual, discovered).
- Tenant
Id string - Tenant ID from provider configuration.
- Updated
At string - Last update timestamp.
- Vendor
Id string - Stable vendor identifier.
- approved bool
- Whether this vendor is approved for pass-through MCP host access.
- capabilities list(string)
- Capability bindings this vendor/runtime identity is allowed to request.
- created_
at string - Creation timestamp.
- display_
name string - Human-friendly vendor display name.
- egress_
allowed_ list(string)host_ patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- egress_
policy_ stringmode - Egress policy mode for vendor traffic (enforce or observe).
- host_
patterns list(string) - Allowed host patterns for this vendor (for example api.openai.com).
- last_
seen_ stringat - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- manifest_
signature_ stringbundle_ ref - Signature bundle reference used for manifest verification.
- manifest_
signature_ stringsigner - Signer identity for verified manifest signatures.
- manifest_
signature_ stringstatus - Manifest signature verification status (verified, pending, failed).
- manifest_
signature_ stringverified_ at - RFC3339 timestamp when manifest signature was verified.
- notes string
- Optional reviewer notes for this vendor entry.
- runtime_
identity string - Capability-scoped runtime identity used at action-time enforcement.
- source string
- Vendor entry source (for example manual, discovered).
- tenant_
id string - Tenant ID from provider configuration.
- updated_
at string - Last update timestamp.
- vendor_
id string - Stable vendor identifier.
- approved Boolean
- Whether this vendor is approved for pass-through MCP host access.
- capabilities List<String>
- Capability bindings this vendor/runtime identity is allowed to request.
- created
At String - Creation timestamp.
- display
Name String - Human-friendly vendor display name.
- egress
Allowed List<String>Host Patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- egress
Policy StringMode - Egress policy mode for vendor traffic (enforce or observe).
- host
Patterns List<String> - Allowed host patterns for this vendor (for example api.openai.com).
- last
Seen StringAt - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- manifest
Signature StringBundle Ref - Signature bundle reference used for manifest verification.
- manifest
Signature StringSigner - Signer identity for verified manifest signatures.
- manifest
Signature StringStatus - Manifest signature verification status (verified, pending, failed).
- manifest
Signature StringVerified At - RFC3339 timestamp when manifest signature was verified.
- notes String
- Optional reviewer notes for this vendor entry.
- runtime
Identity String - Capability-scoped runtime identity used at action-time enforcement.
- source String
- Vendor entry source (for example manual, discovered).
- tenant
Id String - Tenant ID from provider configuration.
- updated
At String - Last update timestamp.
- vendor
Id String - Stable vendor identifier.
- approved boolean
- Whether this vendor is approved for pass-through MCP host access.
- capabilities string[]
- Capability bindings this vendor/runtime identity is allowed to request.
- created
At string - Creation timestamp.
- display
Name string - Human-friendly vendor display name.
- egress
Allowed string[]Host Patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- egress
Policy stringMode - Egress policy mode for vendor traffic (enforce or observe).
- host
Patterns string[] - Allowed host patterns for this vendor (for example api.openai.com).
- last
Seen stringAt - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- manifest
Signature stringBundle Ref - Signature bundle reference used for manifest verification.
- manifest
Signature stringSigner - Signer identity for verified manifest signatures.
- manifest
Signature stringStatus - Manifest signature verification status (verified, pending, failed).
- manifest
Signature stringVerified At - RFC3339 timestamp when manifest signature was verified.
- notes string
- Optional reviewer notes for this vendor entry.
- runtime
Identity string - Capability-scoped runtime identity used at action-time enforcement.
- source string
- Vendor entry source (for example manual, discovered).
- tenant
Id string - Tenant ID from provider configuration.
- updated
At string - Last update timestamp.
- vendor
Id string - Stable vendor identifier.
- approved bool
- Whether this vendor is approved for pass-through MCP host access.
- capabilities Sequence[str]
- Capability bindings this vendor/runtime identity is allowed to request.
- created_
at str - Creation timestamp.
- display_
name str - Human-friendly vendor display name.
- egress_
allowed_ Sequence[str]host_ patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- egress_
policy_ strmode - Egress policy mode for vendor traffic (enforce or observe).
- host_
patterns Sequence[str] - Allowed host patterns for this vendor (for example api.openai.com).
- last_
seen_ strat - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- manifest_
signature_ strbundle_ ref - Signature bundle reference used for manifest verification.
- manifest_
signature_ strsigner - Signer identity for verified manifest signatures.
- manifest_
signature_ strstatus - Manifest signature verification status (verified, pending, failed).
- manifest_
signature_ strverified_ at - RFC3339 timestamp when manifest signature was verified.
- notes str
- Optional reviewer notes for this vendor entry.
- runtime_
identity str - Capability-scoped runtime identity used at action-time enforcement.
- source str
- Vendor entry source (for example manual, discovered).
- tenant_
id str - Tenant ID from provider configuration.
- updated_
at str - Last update timestamp.
- vendor_
id str - Stable vendor identifier.
- approved Boolean
- Whether this vendor is approved for pass-through MCP host access.
- capabilities List<String>
- Capability bindings this vendor/runtime identity is allowed to request.
- created
At String - Creation timestamp.
- display
Name String - Human-friendly vendor display name.
- egress
Allowed List<String>Host Patterns - Allowed egress host patterns enforced for this vendor/runtime identity.
- egress
Policy StringMode - Egress policy mode for vendor traffic (enforce or observe).
- host
Patterns List<String> - Allowed host patterns for this vendor (for example api.openai.com).
- last
Seen StringAt - Last observed timestamp (RFC3339) for this vendor in runtime traffic.
- manifest
Signature StringBundle Ref - Signature bundle reference used for manifest verification.
- manifest
Signature StringSigner - Signer identity for verified manifest signatures.
- manifest
Signature StringStatus - Manifest signature verification status (verified, pending, failed).
- manifest
Signature StringVerified At - RFC3339 timestamp when manifest signature was verified.
- notes String
- Optional reviewer notes for this vendor entry.
- runtime
Identity String - Capability-scoped runtime identity used at action-time enforcement.
- source String
- Vendor entry source (for example manual, discovered).
- tenant
Id String - Tenant ID from provider configuration.
- updated
At String - Last update timestamp.
- vendor
Id String - Stable vendor identifier.
Package Details
- Repository
- thoth atensecurity/pulumi-thoth
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
thothTerraform Provider.
Thothpublished on Sunday, Oct 25, 2026 by Aten Security