AXIAM PHP SDK

__construct()

Constructs a CimdPolicy.

Parameters

$allowHttp : bool|null = null

Permit an http:// client_id and an http:// fetch. Development only, and it does more than its name says.* AXIAM's shared SSRF guard couples the scheme rule to the address rule — the same seam that lets an integration test point a fetch at a loopback mock server — so a tenant that allows http also allows the first hop to resolve to a private address. Redirect hops are validated strictly whatever this says, and a public deployment that sets it has removed the control that makes 169.254.169.254 unreachable. (optional)

$confidentialOnly : bool|null = null

Refuse a document whose token_endpoint_auth_method is none. Off by default, because none is what every MCP desktop client is. A tenant that turns it on accepts only private_key_jwt documents, which is the posture for a deployment whose CIMD clients are servers rather than desktops. (optional)

$enabled : bool|null = null

Off unless somebody turns it on (I1). With this false, a URL-shaped client_id is exactly today's unknown client: nothing is fetched, nothing is materialised, and the ordinary repository lookup answers as it always has. (optional)

$maxCacheSecs : int|null = null

The ceiling on a document's cache lifetime, in seconds. Clamped to [CIMD_MAX_CACHE_CEILING_SECS]. (optional)

$maxMetadataBytes : int|null = null

The hard cap on how many bytes of a document are read, before it is parsed. Clamped to [CIMD_MAX_METADATA_BYTES_CEILING]. (optional)

$minCacheSecs : int|null = null

The floor under a document's cache lifetime, in seconds. Clamped to [CIMD_MIN_CACHE_FLOOR_SECS]. (optional)

$restrictSameDomain : bool|null = null

Require every redirect_uris host in the document to equal the host of the client_id URL itself. On by default, because the document says who the client is and a redirect to somewhere else is the one thing a stolen or mirrored document would want to change. It is turned off for the desktop MCP clients, whose callbacks are on loopback and therefore can never share a host with a https:// client_id; docs/admin/client-id-metadata-documents.md says so and says why. (optional)

$trustedClientIdDomains : array<int, string>|null = null

The hosts whose documents this tenant will fetch at all, as globs (mcp.example.com, or *.example.com for every host under one domain). An empty list resolves nothing, and enabling CIMD while it is empty is refused — see [validate_cimd_policy]. That is a deliberate departure from "a URL is a client identifier, so any URL will do": the fetch is triggered by an unauthenticated request naming the URL, so an unrestricted list is a request-forgery primitive offered to strangers, bounded only by the SSRF guard's address rules. Naming the publishers a tenant actually fronts costs one settings field and removes the class. * is refused here, and so is a wildcard over a whole top-level domain (*.com): both are the posture the empty list is refused for, spelled differently, and a control with no second control behind it cannot have a one-character bypass and still be the control. It is a floor and not a public-suffix check — *.github.io passes, and trusting shared hosting stays the operator's decision, bounded by the per-tenant quota rather than by this field. * remains valid in [CimdPolicy::trusted_redirect_domains], whose entries are not fetch targets. (optional)

$trustedRedirectDomains : array<int, string>|null = null

The hosts a document's redirect_uris may point at, as globs. The loopback hosts (127.0.0.1, [::1], localhost) are always allowed, because RFC 8252 §7.3 is how every desktop MCP client receives its callback — so an empty list is not a refusal of everything, it is "loopback only", which is exactly the Claude Code and VS Code profile. (optional)

jsonSerialize()

Renders this object for `json_encode()`.

toArray()

Renders this object back to its wire form.