Configuration Overview

Configure dashboard access, redaction, optional field encryption, and current-user capture.

The constructor accepts one required auth object plus optional redaction, encryption, and getCurrentUser settings.


new ServerDevTools({
  auth: { username, password },
  redaction: { additionalHeaders: ["x-access-token"] },
  encryption: { key, fields },
  getCurrentUser,
});

additionalHeaders extends the default sensitive header names; it does not replace them. Names are trimmed, matched case-insensitively, and de-duplicated. This setting covers header names only. See the configuration reference for the complete public shape, then read authentication, encryption, and security guidance before using the dashboard with real data.