Services Configuration Tree
What each file and directory under services/ configures, which are auto-discovered, and what ships disabled.
On this page
TL;DR: All runtime configuration is YAML (and Markdown bodies) under
services/. services/config/config.yaml is an aggregator with an explicit
includes: list. Skills, plugins, marketplaces and artifacts are discovered
from their nested directories and are not listed there. Unknown keys are
refused at load time.
Listed in includes:
| Path | Configures |
|---|---|
mcp/systemprompt.yaml |
The internal MCP server users reach (issues, documents, agent runs, admin plane). Enabled. |
mcp/github.yaml |
GitHub, used for workflow write-backs only. Enabled; no plugin exposes it. |
mcp/clickhouse.yaml |
Read-only ClickHouse SQL. Disabled. |
mcp/salesforce.yaml, mcp/atlassian.yaml, mcp/google_workspace.yaml, mcp/google_drive.yaml |
Vendor connectors. All disabled. |
ai/config.yaml |
AI policy (for example default_max_output_tokens: 4096). |
scheduler/config.yaml |
Background jobs. See Scheduled Jobs. |
external_agents/*.yaml |
Client hosts the gateway serves: claude_code, claude_desktop, opencode enabled; codex_cli, hermes disabled. |
settings.default_marketplace_id in the aggregator is astound-commons.
Read by convention
| Path | Configures |
|---|---|
ai/credentials.yaml, ai/providers.yaml, ai/models.yaml, ai/deployments.yaml, ai/gateway.yaml |
The model catalog: the single vertex provider, 13 models, which Vertex endpoints serve each, and gateway routes and defaults. See Gateway API. |
skills/<id>/ |
One skill per directory (config.yaml plus body). Ships agent_farm_runs, google_workspace_test, psa_data, report_issue, salesforce_hygiene_check, systemprompt_cli, who_am_i. See Skills Lifecycle. |
plugins/<id>/config.yaml |
Plugin bindings: astound-commons, astound-connectors. |
marketplaces/<id>/config.yaml |
Marketplaces: astound-commons, astound-connectors. |
artifacts/<id>/ |
Dashboards: admin-ai-usage. |
access-control/rules.yaml |
Every entitlement. See Access Control. |
governance/config.yaml |
The governance chain and its mode. See Governance Modes. |
gateway/policies.yaml |
Gateway quotas and safety scanners. |
workflows/<id>/ |
Workflow definitions (workflow.yaml, prompts/, schemas/). Ships core-dev. See Workflows. |
brain/ |
Brain configuration: kinds/ (ships decision, delivery_risk, engagement_phase, team_assignment), profiles/delivery.yaml, retrieval.yaml, dense.yaml, importance.yaml, synonyms.yaml, topics.yaml. See Brain. |
documents/classes.yaml, documents/templates/ |
Drive document classes (how far an agent may act) and document templates. See Drive. |
config/files.yaml |
The shared document store and live-session settings. |
config/salesforce-orgs.yaml |
The Salesforce org registry, one entry per Salesforce MCP server. |
config/blog.yaml |
Content ingestion config for the web jobs; without it /documentation serves 404. |
clickhouse/config.yaml, clickhouse/mcp.yaml |
ClickHouse export and the MCP server's query caps. |
notifications/rules.yaml, streams.yaml, subscriptions.yaml |
Declared notification rules, streams and subscriptions. |
content/config.yaml, content/documentation/ |
Content sources, including these documentation pages. |
web/config.yaml |
The web frontend config, read directly (not via includes:). |
web/config/ |
adfs.yaml and federation metadata, groups.yaml, security.yaml, theme.yaml, homepage.yaml, navigation.yaml. |
web/metadata.yaml, web/vendor.yaml, web/templates/, web/assets/ |
Site metadata, the third-party frontend allowlist (changed only with just vendor-add), templates and assets. |
Checking and syncing
systemprompt plugins validate and systemprompt web validate check
configuration; drift between these files and the database is shown at
/admin/sync (Services Sync).