Example profiles

Provisional schema — ADR-0004 Accepted

These files illustrate mixed read/write grants across profiles using placeholder hostnames and secret references. The field layout follows ADR-0004 and Configuration; capability enforcement lands in POL-001.

All examples are secret-free: credentials are referenced by name only.

Files

File	Purpose
profile-read-only.yaml	Production-style inspect + browse only
profile-mixed-grants.yaml	Read-only production + write-capable development profile
profile-kind-local.yaml	Local Kind IBM MQ via MKurator (QM1, https://mq.localhost:30443)

Usage

```bash export MQ_PROD_CREDENTIALS='operator:secret' # from your secret store — never commit ibm-mq-mcp --config /etc/ibm-mq-mcp/profiles.yaml

or

export IBM_MQ_MCP_CONFIG=/etc/ibm-mq-mcp/profiles.yaml ibm-mq-mcp ```

Use --strict-startup when every profile in the file must validate before the process listens.

MKurator note

If INT-001 adds ownership discovery, profiles remain independent of Kubernetes — see MKurator coexistence.