{
  "apiVersion": "hub.example.com/v1alpha1",
  "kind": "ConnectorTemplate",
  "metadata": {
    "name": "Authentik Default",
    "slug": "authentik-default"
  },
  "spec": {
    "connectorType": "authentik",
    "image": "local-build://connector-authentik",
    "transport": "streamable-http",
    "credentialReferences": [
      "docker-secret://authentik_mcp_token"
    ],
    "allowedNetworkTargets": [
      "config://AUTHENTIK_BASE_URL"
    ],
    "configuration": {
      "readOnly": true,
      "includeApplications": true,
      "includeProviders": true,
      "includeOutpostHealth": true,
      "includeTokenValues": false
    },
    "health": {
      "path": "/health/ready",
      "intervalSeconds": 30,
      "failureThreshold": 3
    },
    "defaultRiskClasses": [
      "R0",
      "R1"
    ]
  }
}