diff --git a/deps/github.com/pomerium/enterprise-client b/deps/github.com/pomerium/enterprise-client
index 4a77be0..d68111f 160000
--- a/deps/github.com/pomerium/enterprise-client
+++ b/deps/github.com/pomerium/enterprise-client
@@ -1 +1 @@
-Subproject commit 4a77be070cde7bfb7719da3306131d83869d9e32
+Subproject commit d68111fc6bcd886dd9d9150b973eaee3bf5b83cf
diff --git a/src/pomerium/pb/settings_pb2.py b/src/pomerium/pb/settings_pb2.py
index a884dcd..8f70574 100644
--- a/src/pomerium/pb/settings_pb2.py
+++ b/src/pomerium/pb/settings_pb2.py
@@ -28,7 +28,7 @@
 import pomerium.pb.routes_pb2 as routes__pb2
 
 
-DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x0esettings.proto\x12\x12pomerium.dashboard\x1a\x1egoogle/protobuf/duration.proto\x1a\x1cgoogle/protobuf/struct.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x0croutes.proto\"I\n\x0f\x43onsoleSettings\x12\x1e\n\x16\x65nable_feedback_widget\x18\x01 \x01(\x08\x12\x16\n\x0euse_changesets\x18\x02 \x01(\x08\"\xbe\x35\n\x08Settings\x12\n\n\x02id\x18k \x01(\t\x12\x17\n\ncluster_id\x18l \x01(\tH\x00\x88\x01\x01\x12/\n\x0bmodified_at\x18\x01 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x1c\n\x0finstallation_id\x18\x44 \x01(\tH\x01\x88\x01\x01\x12\x16\n\tlog_level\x18\x03 \x01(\tH\x02\x88\x01\x01\x12\x1c\n\x0fproxy_log_level\x18\x04 \x01(\tH\x03\x88\x01\x01\x12\x1a\n\rshared_secret\x18\x05 \x01(\tH\x04\x88\x01\x01\x12\x15\n\x08services\x18\x06 \x01(\tH\x05\x88\x01\x01\x12\x14\n\x07\x61\x64\x64ress\x18\x07 \x01(\tH\x06\x88\x01\x01\x12\x1c\n\x0finsecure_server\x18\x08 \x01(\x08H\x07\x88\x01\x01\x12@\n\x18\x64ns_failure_refresh_rate\x18x \x01(\x0b\x32\x19.google.protobuf.DurationH\x08\x88\x01\x01\x12\x1e\n\x11\x64ns_lookup_family\x18< \x01(\tH\t\x88\x01\x01\x12\x39\n\x11\x64ns_query_timeout\x18w \x01(\x0b\x32\x19.google.protobuf.DurationH\n\x88\x01\x01\x12\x1c\n\x0f\x64ns_query_tries\x18v \x01(\rH\x0b\x88\x01\x01\x12\x38\n\x10\x64ns_refresh_rate\x18y \x01(\x0b\x32\x19.google.protobuf.DurationH\x0c\x88\x01\x01\x12 \n\x13\x64ns_udp_max_queries\x18t \x01(\rH\r\x88\x01\x01\x12\x18\n\x0b\x64ns_use_tcp\x18u \x01(\x08H\x0e\x88\x01\x01\x12>\n\x0c\x63\x65rtificates\x18\t \x03(\x0b\x32(.pomerium.dashboard.Settings.Certificate\x12\x1f\n\x12http_redirect_addr\x18\n \x01(\tH\x0f\x88\x01\x01\x12\x34\n\x0ctimeout_read\x18\x0b \x01(\x0b\x32\x19.google.protobuf.DurationH\x10\x88\x01\x01\x12\x35\n\rtimeout_write\x18\x0c \x01(\x0b\x32\x19.google.protobuf.DurationH\x11\x88\x01\x01\x12\x34\n\x0ctimeout_idle\x18\r \x01(\x0b\x32\x19.google.protobuf.DurationH\x12\x88\x01\x01\x12%\n\x18\x61uthenticate_service_url\x18\x0e \x01(\tH\x13\x88\x01\x01\x12\x18\n\x0b\x63ookie_name\x18\x10 \x01(\tH\x14\x88\x01\x01\x12\x1a\n\rcookie_secret\x18\x11 \x01(\tH\x15\x88\x01\x01\x12\x1a\n\rcookie_domain\x18\x12 \x01(\tH\x16\x88\x01\x01\x12\x1a\n\rcookie_secure\x18\x13 \x01(\x08H\x17\x88\x01\x01\x12\x1d\n\x10\x63ookie_http_only\x18\x14 \x01(\x08H\x18\x88\x01\x01\x12\x1d\n\x10\x63ookie_same_site\x18P \x01(\tH\x19\x88\x01\x01\x12\x35\n\rcookie_expire\x18\x15 \x01(\x0b\x32\x19.google.protobuf.DurationH\x1a\x88\x01\x01\x12\x1a\n\ridp_client_id\x18\x16 \x01(\tH\x1b\x88\x01\x01\x12\x1e\n\x11idp_client_secret\x18\x17 \x01(\tH\x1c\x88\x01\x01\x12\x19\n\x0cidp_provider\x18\x18 \x01(\tH\x1d\x88\x01\x01\x12\x1d\n\x10idp_provider_url\x18\x19 \x01(\tH\x1e\x88\x01\x01\x12\x0e\n\x06scopes\x18\x1a \x03(\t\x12 \n\x13idp_service_account\x18\x1b \x01(\tH\x1f\x88\x01\x01\x12\x45\n\x1didp_refresh_directory_timeout\x18\x1c \x01(\x0b\x32\x19.google.protobuf.DurationH \x88\x01\x01\x12\x46\n\x1eidp_refresh_directory_interval\x18\x1d \x01(\x0b\x32\x19.google.protobuf.DurationH!\x88\x01\x01\x12G\n\x0erequest_params\x18\x1e \x03(\x0b\x32/.pomerium.dashboard.Settings.RequestParamsEntry\x12\"\n\x15\x61uthorize_service_url\x18  \x01(\tH\"\x88\x01\x01\x12\"\n\x15\x63\x65rtificate_authority\x18\" \x01(\tH#\x88\x01\x01\x12\'\n\x1a\x63\x65rtificate_authority_file\x18# \x01(\tH$\x88\x01\x01\x12.\n!certificate_authority_key_pair_id\x18@ \x01(\tH%\x88\x01\x01\x12R\n\x14set_response_headers\x18\x43 \x03(\x0b\x32\x34.pomerium.dashboard.Settings.SetResponseHeadersEntry\x12N\n\x12jwt_claims_headers\x18\x42 \x03(\x0b\x32\x32.pomerium.dashboard.Settings.JwtClaimsHeadersEntry\x12>\n\x11jwt_groups_filter\x18W \x01(\x0b\x32#.pomerium.dashboard.JwtGroupsFilter\x12@\n\x11jwt_issuer_format\x18j \x01(\x0e\x32 .pomerium.dashboard.IssuerFormatH&\x88\x01\x01\x12@\n\x18\x64\x65\x66\x61ult_upstream_timeout\x18\' \x01(\x0b\x32\x19.google.protobuf.DurationH\'\x88\x01\x01\x12\x1c\n\x0fmetrics_address\x18( \x01(\tH(\x88\x01\x01\x12!\n\x14otel_traces_exporter\x18X \x01(\tH)\x88\x01\x01\x12$\n\x17otel_traces_sampler_arg\x18Y \x01(\x01H*\x88\x01\x01\x12 \n\x18otel_resource_attributes\x18Z \x03(\t\x12\x1b\n\x0eotel_log_level\x18[ \x01(\tH+\x88\x01\x01\x12.\n!otel_attribute_value_length_limit\x18\\ \x01(\x05H,\x88\x01\x01\x12(\n\x1botel_exporter_otlp_endpoint\x18] \x01(\tH-\x88\x01\x01\x12/\n\"otel_exporter_otlp_traces_endpoint\x18^ \x01(\tH.\x88\x01\x01\x12(\n\x1botel_exporter_otlp_protocol\x18_ \x01(\tH/\x88\x01\x01\x12/\n\"otel_exporter_otlp_traces_protocol\x18` \x01(\tH0\x88\x01\x01\x12\"\n\x1aotel_exporter_otlp_headers\x18\x61 \x03(\t\x12)\n!otel_exporter_otlp_traces_headers\x18\x62 \x03(\t\x12\x42\n\x1aotel_exporter_otlp_timeout\x18\x63 \x01(\x0b\x32\x19.google.protobuf.DurationH1\x88\x01\x01\x12I\n!otel_exporter_otlp_traces_timeout\x18\x64 \x01(\x0b\x32\x19.google.protobuf.DurationH2\x88\x01\x01\x12?\n\x17otel_bsp_schedule_delay\x18\x65 \x01(\x0b\x32\x19.google.protobuf.DurationH3\x88\x01\x01\x12+\n\x1eotel_bsp_max_export_batch_size\x18\x66 \x01(\x05H4\x88\x01\x01\x12\x19\n\x0cgrpc_address\x18. \x01(\tH5\x88\x01\x01\x12\x1a\n\rgrpc_insecure\x18/ \x01(\x08H6\x88\x01\x01\x12\x1e\n\x11\x63\x61\x63he_service_url\x18\x33 \x01(\tH7\x88\x01\x01\x12#\n\x16\x64\x61tabroker_service_url\x18\x34 \x01(\tH8\x88\x01\x01\x12\x16\n\tclient_ca\x18\x35 \x01(\tH9\x88\x01\x01\x12\x1b\n\x0e\x63lient_ca_file\x18\x36 \x01(\tH:\x88\x01\x01\x12\"\n\x15\x63lient_ca_key_pair_id\x18\x41 \x01(\tH;\x88\x01\x01\x12\x43\n6google_cloud_serverless_authentication_service_account\x18\x37 \x01(\tH<\x88\x01\x01\x12\x15\n\x08\x61utocert\x18\x38 \x01(\x08H=\x88\x01\x01\x12!\n\x14\x61utocert_use_staging\x18\x39 \x01(\x08H>\x88\x01\x01\x12!\n\x14\x61utocert_must_staple\x18: \x01(\x08H?\x88\x01\x01\x12\x19\n\x0c\x61utocert_dir\x18; \x01(\tH@\x88\x01\x01\x12\x1c\n\x0fskip_xff_append\x18? \x01(\x08HA\x88\x01\x01\x12\x1a\n\rprimary_color\x18\x45 \x01(\tHB\x88\x01\x01\x12\x1c\n\x0fsecondary_color\x18\x46 \x01(\tHC\x88\x01\x01\x12#\n\x16\x64\x61rkmode_primary_color\x18G \x01(\tHD\x88\x01\x01\x12%\n\x18\x64\x61rkmode_secondary_color\x18H \x01(\tHE\x88\x01\x01\x12\x15\n\x08logo_url\x18I \x01(\tHF\x88\x01\x01\x12\x18\n\x0b\x66\x61vicon_url\x18J \x01(\tHG\x88\x01\x01\x12*\n\x1d\x65rror_message_first_paragraph\x18K \x01(\tHH\x88\x01\x01\x12\x1e\n\x11identity_provider\x18L \x01(\tHI\x88\x01\x01\x12?\n\x19identity_provider_options\x18M \x01(\x0b\x32\x17.google.protobuf.StructHJ\x88\x01\x01\x12J\n\"identity_provider_refresh_interval\x18N \x01(\x0b\x32\x19.google.protobuf.DurationHK\x88\x01\x01\x12I\n!identity_provider_refresh_timeout\x18O \x01(\x0b\x32\x19.google.protobuf.DurationHL\x88\x01\x01\x12G\n\x11\x61\x63\x63\x65ss_log_fields\x18R \x01(\x0b\x32\'.pomerium.dashboard.Settings.StringListHM\x88\x01\x01\x12J\n\x14\x61uthorize_log_fields\x18S \x01(\x0b\x32\'.pomerium.dashboard.Settings.StringListHN\x88\x01\x01\x12\"\n\x15pass_identity_headers\x18T \x01(\x08HO\x88\x01\x01\x12\x15\n\roriginator_id\x18g \x01(\t\x12G\n\x13\x62\x65\x61rer_token_format\x18h \x01(\x0e\x32%.pomerium.dashboard.BearerTokenFormatHP\x88\x01\x01\x12X\n\"idp_access_token_allowed_audiences\x18i \x01(\x0b\x32\'.pomerium.dashboard.Settings.StringListHQ\x88\x01\x01\x12\x36\n\ncodec_type\x18m \x01(\x0e\x32\x1d.pomerium.dashboard.CodecTypeHR\x88\x01\x01\x12U\n\x1a\x63ircuit_breaker_thresholds\x18n \x01(\x0b\x32,.pomerium.dashboard.CircuitBreakerThresholdsHS\x88\x01\x01\x12\x18\n\x0bssh_address\x18o \x01(\tHT\x88\x01\x01\x12H\n\x12ssh_host_key_files\x18p \x01(\x0b\x32\'.pomerium.dashboard.Settings.StringListHU\x88\x01\x01\x12\x43\n\rssh_host_keys\x18q \x01(\x0b\x32\'.pomerium.dashboard.Settings.StringListHV\x88\x01\x01\x12!\n\x14ssh_user_ca_key_file\x18r \x01(\tHW\x88\x01\x01\x12\x1c\n\x0fssh_user_ca_key\x18s \x01(\tHX\x88\x01\x01\x1aI\n\x0b\x43\x65rtificate\x12\x12\n\ncert_bytes\x18\x03 \x01(\x0c\x12\x11\n\tkey_bytes\x18\x04 \x01(\x0c\x12\x13\n\x0bkey_pair_id\x18\x05 \x01(\t\x1a\x1c\n\nStringList\x12\x0e\n\x06values\x18\x01 \x03(\t\x1a\x34\n\x12RequestParamsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a\x39\n\x17SetResponseHeadersEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a\x37\n\x15JwtClaimsHeadersEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x42\r\n\x0b_cluster_idB\x12\n\x10_installation_idB\x0c\n\n_log_levelB\x12\n\x10_proxy_log_levelB\x10\n\x0e_shared_secretB\x0b\n\t_servicesB\n\n\x08_addressB\x12\n\x10_insecure_serverB\x1b\n\x19_dns_failure_refresh_rateB\x14\n\x12_dns_lookup_familyB\x14\n\x12_dns_query_timeoutB\x12\n\x10_dns_query_triesB\x13\n\x11_dns_refresh_rateB\x16\n\x14_dns_udp_max_queriesB\x0e\n\x0c_dns_use_tcpB\x15\n\x13_http_redirect_addrB\x0f\n\r_timeout_readB\x10\n\x0e_timeout_writeB\x0f\n\r_timeout_idleB\x1b\n\x19_authenticate_service_urlB\x0e\n\x0c_cookie_nameB\x10\n\x0e_cookie_secretB\x10\n\x0e_cookie_domainB\x10\n\x0e_cookie_secureB\x13\n\x11_cookie_http_onlyB\x13\n\x11_cookie_same_siteB\x10\n\x0e_cookie_expireB\x10\n\x0e_idp_client_idB\x14\n\x12_idp_client_secretB\x0f\n\r_idp_providerB\x13\n\x11_idp_provider_urlB\x16\n\x14_idp_service_accountB \n\x1e_idp_refresh_directory_timeoutB!\n\x1f_idp_refresh_directory_intervalB\x18\n\x16_authorize_service_urlB\x18\n\x16_certificate_authorityB\x1d\n\x1b_certificate_authority_fileB$\n\"_certificate_authority_key_pair_idB\x14\n\x12_jwt_issuer_formatB\x1b\n\x19_default_upstream_timeoutB\x12\n\x10_metrics_addressB\x17\n\x15_otel_traces_exporterB\x1a\n\x18_otel_traces_sampler_argB\x11\n\x0f_otel_log_levelB$\n\"_otel_attribute_value_length_limitB\x1e\n\x1c_otel_exporter_otlp_endpointB%\n#_otel_exporter_otlp_traces_endpointB\x1e\n\x1c_otel_exporter_otlp_protocolB%\n#_otel_exporter_otlp_traces_protocolB\x1d\n\x1b_otel_exporter_otlp_timeoutB$\n\"_otel_exporter_otlp_traces_timeoutB\x1a\n\x18_otel_bsp_schedule_delayB!\n\x1f_otel_bsp_max_export_batch_sizeB\x0f\n\r_grpc_addressB\x10\n\x0e_grpc_insecureB\x14\n\x12_cache_service_urlB\x19\n\x17_databroker_service_urlB\x0c\n\n_client_caB\x11\n\x0f_client_ca_fileB\x18\n\x16_client_ca_key_pair_idB9\n7_google_cloud_serverless_authentication_service_accountB\x0b\n\t_autocertB\x17\n\x15_autocert_use_stagingB\x17\n\x15_autocert_must_stapleB\x0f\n\r_autocert_dirB\x12\n\x10_skip_xff_appendB\x10\n\x0e_primary_colorB\x12\n\x10_secondary_colorB\x19\n\x17_darkmode_primary_colorB\x1b\n\x19_darkmode_secondary_colorB\x0b\n\t_logo_urlB\x0e\n\x0c_favicon_urlB \n\x1e_error_message_first_paragraphB\x14\n\x12_identity_providerB\x1c\n\x1a_identity_provider_optionsB%\n#_identity_provider_refresh_intervalB$\n\"_identity_provider_refresh_timeoutB\x14\n\x12_access_log_fieldsB\x17\n\x15_authorize_log_fieldsB\x18\n\x16_pass_identity_headersB\x16\n\x14_bearer_token_formatB%\n#_idp_access_token_allowed_audiencesB\r\n\x0b_codec_typeB\x1d\n\x1b_circuit_breaker_thresholdsB\x0e\n\x0c_ssh_addressB\x15\n\x13_ssh_host_key_filesB\x10\n\x0e_ssh_host_keysB\x17\n\x15_ssh_user_ca_key_fileB\x12\n\x10_ssh_user_ca_keyJ\x04\x08\x0f\x10\x10J\x04\x08)\x10*J\x04\x08*\x10+J\x04\x08U\x10VJ\x04\x08V\x10W\"\x1b\n\x19GetConsoleSettingsRequest\"[\n\x1aGetConsoleSettingsResponse\x12=\n\x10\x63onsole_settings\x18\x01 \x01(\x0b\x32#.pomerium.dashboard.ConsoleSettings\"<\n\x12GetSettingsRequest\x12\x17\n\ncluster_id\x18\x01 \x01(\tH\x00\x88\x01\x01\x42\r\n\x0b_cluster_id\"E\n\x13GetSettingsResponse\x12.\n\x08settings\x18\x01 \x01(\x0b\x32\x1c.pomerium.dashboard.Settings\"D\n\x12SetSettingsRequest\x12.\n\x08settings\x18\x01 \x01(\x0b\x32\x1c.pomerium.dashboard.Settings\"E\n\x13SetSettingsResponse\x12.\n\x08settings\x18\x01 \x01(\x0b\x32\x1c.pomerium.dashboard.Settings*z\n\tCodecType\x12\x16\n\x12\x43ODEC_TYPE_UNKNOWN\x10\x00\x12\x13\n\x0f\x43ODEC_TYPE_AUTO\x10\x01\x12\x14\n\x10\x43ODEC_TYPE_HTTP1\x10\x02\x12\x14\n\x10\x43ODEC_TYPE_HTTP2\x10\x03\x12\x14\n\x10\x43ODEC_TYPE_HTTP3\x10\x04\x32\xae\x03\n\x0fSettingsService\x12^\n\x0bGetSettings\x12&.pomerium.dashboard.GetSettingsRequest\x1a\'.pomerium.dashboard.GetSettingsResponse\x12^\n\x0bSetSettings\x12&.pomerium.dashboard.SetSettingsRequest\x1a\'.pomerium.dashboard.SetSettingsResponse\x12\x66\n\x13GetBrandingSettings\x12&.pomerium.dashboard.GetSettingsRequest\x1a\'.pomerium.dashboard.GetSettingsResponse\x12s\n\x12GetConsoleSettings\x12-.pomerium.dashboard.GetConsoleSettingsRequest\x1a..pomerium.dashboard.GetConsoleSettingsResponseB-Z+github.com/pomerium/pomerium-console/pkg/pbb\x06proto3')
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x0esettings.proto\x12\x12pomerium.dashboard\x1a\x1egoogle/protobuf/duration.proto\x1a\x1cgoogle/protobuf/struct.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x0croutes.proto\"I\n\x0f\x43onsoleSettings\x12\x1e\n\x16\x65nable_feedback_widget\x18\x01 \x01(\x08\x12\x16\n\x0euse_changesets\x18\x02 \x01(\x08\"\xb5\x36\n\x08Settings\x12\n\n\x02id\x18k \x01(\t\x12\x17\n\ncluster_id\x18l \x01(\tH\x00\x88\x01\x01\x12/\n\x0bmodified_at\x18\x01 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x1c\n\x0finstallation_id\x18\x44 \x01(\tH\x01\x88\x01\x01\x12\x16\n\tlog_level\x18\x03 \x01(\tH\x02\x88\x01\x01\x12\x1c\n\x0fproxy_log_level\x18\x04 \x01(\tH\x03\x88\x01\x01\x12\x1a\n\rshared_secret\x18\x05 \x01(\tH\x04\x88\x01\x01\x12\x15\n\x08services\x18\x06 \x01(\tH\x05\x88\x01\x01\x12\x14\n\x07\x61\x64\x64ress\x18\x07 \x01(\tH\x06\x88\x01\x01\x12\x1c\n\x0finsecure_server\x18\x08 \x01(\x08H\x07\x88\x01\x01\x12@\n\x18\x64ns_failure_refresh_rate\x18x \x01(\x0b\x32\x19.google.protobuf.DurationH\x08\x88\x01\x01\x12\x1e\n\x11\x64ns_lookup_family\x18< \x01(\tH\t\x88\x01\x01\x12\x39\n\x11\x64ns_query_timeout\x18w \x01(\x0b\x32\x19.google.protobuf.DurationH\n\x88\x01\x01\x12\x1c\n\x0f\x64ns_query_tries\x18v \x01(\rH\x0b\x88\x01\x01\x12\x38\n\x10\x64ns_refresh_rate\x18y \x01(\x0b\x32\x19.google.protobuf.DurationH\x0c\x88\x01\x01\x12 \n\x13\x64ns_udp_max_queries\x18t \x01(\rH\r\x88\x01\x01\x12\x18\n\x0b\x64ns_use_tcp\x18u \x01(\x08H\x0e\x88\x01\x01\x12>\n\x0c\x63\x65rtificates\x18\t \x03(\x0b\x32(.pomerium.dashboard.Settings.Certificate\x12\x1f\n\x12http_redirect_addr\x18\n \x01(\tH\x0f\x88\x01\x01\x12\x34\n\x0ctimeout_read\x18\x0b \x01(\x0b\x32\x19.google.protobuf.DurationH\x10\x88\x01\x01\x12\x35\n\rtimeout_write\x18\x0c \x01(\x0b\x32\x19.google.protobuf.DurationH\x11\x88\x01\x01\x12\x34\n\x0ctimeout_idle\x18\r \x01(\x0b\x32\x19.google.protobuf.DurationH\x12\x88\x01\x01\x12%\n\x18\x61uthenticate_service_url\x18\x0e \x01(\tH\x13\x88\x01\x01\x12\x18\n\x0b\x63ookie_name\x18\x10 \x01(\tH\x14\x88\x01\x01\x12\x1a\n\rcookie_secret\x18\x11 \x01(\tH\x15\x88\x01\x01\x12\x1a\n\rcookie_domain\x18\x12 \x01(\tH\x16\x88\x01\x01\x12\x1a\n\rcookie_secure\x18\x13 \x01(\x08H\x17\x88\x01\x01\x12\x1d\n\x10\x63ookie_http_only\x18\x14 \x01(\x08H\x18\x88\x01\x01\x12\x1d\n\x10\x63ookie_same_site\x18P \x01(\tH\x19\x88\x01\x01\x12\x35\n\rcookie_expire\x18\x15 \x01(\x0b\x32\x19.google.protobuf.DurationH\x1a\x88\x01\x01\x12\x1a\n\ridp_client_id\x18\x16 \x01(\tH\x1b\x88\x01\x01\x12\x1e\n\x11idp_client_secret\x18\x17 \x01(\tH\x1c\x88\x01\x01\x12\x19\n\x0cidp_provider\x18\x18 \x01(\tH\x1d\x88\x01\x01\x12\x1d\n\x10idp_provider_url\x18\x19 \x01(\tH\x1e\x88\x01\x01\x12\x0e\n\x06scopes\x18\x1a \x03(\t\x12 \n\x13idp_service_account\x18\x1b \x01(\tH\x1f\x88\x01\x01\x12\x45\n\x1didp_refresh_directory_timeout\x18\x1c \x01(\x0b\x32\x19.google.protobuf.DurationH \x88\x01\x01\x12\x46\n\x1eidp_refresh_directory_interval\x18\x1d \x01(\x0b\x32\x19.google.protobuf.DurationH!\x88\x01\x01\x12G\n\x0erequest_params\x18\x1e \x03(\x0b\x32/.pomerium.dashboard.Settings.RequestParamsEntry\x12\"\n\x15\x61uthorize_service_url\x18  \x01(\tH\"\x88\x01\x01\x12\"\n\x15\x63\x65rtificate_authority\x18\" \x01(\tH#\x88\x01\x01\x12\'\n\x1a\x63\x65rtificate_authority_file\x18# \x01(\tH$\x88\x01\x01\x12.\n!certificate_authority_key_pair_id\x18@ \x01(\tH%\x88\x01\x01\x12R\n\x14set_response_headers\x18\x43 \x03(\x0b\x32\x34.pomerium.dashboard.Settings.SetResponseHeadersEntry\x12N\n\x12jwt_claims_headers\x18\x42 \x03(\x0b\x32\x32.pomerium.dashboard.Settings.JwtClaimsHeadersEntry\x12>\n\x11jwt_groups_filter\x18W \x01(\x0b\x32#.pomerium.dashboard.JwtGroupsFilter\x12@\n\x11jwt_issuer_format\x18j \x01(\x0e\x32 .pomerium.dashboard.IssuerFormatH&\x88\x01\x01\x12@\n\x18\x64\x65\x66\x61ult_upstream_timeout\x18\' \x01(\x0b\x32\x19.google.protobuf.DurationH\'\x88\x01\x01\x12\x1c\n\x0fmetrics_address\x18( \x01(\tH(\x88\x01\x01\x12!\n\x14otel_traces_exporter\x18X \x01(\tH)\x88\x01\x01\x12$\n\x17otel_traces_sampler_arg\x18Y \x01(\x01H*\x88\x01\x01\x12 \n\x18otel_resource_attributes\x18Z \x03(\t\x12\x1b\n\x0eotel_log_level\x18[ \x01(\tH+\x88\x01\x01\x12.\n!otel_attribute_value_length_limit\x18\\ \x01(\x05H,\x88\x01\x01\x12(\n\x1botel_exporter_otlp_endpoint\x18] \x01(\tH-\x88\x01\x01\x12/\n\"otel_exporter_otlp_traces_endpoint\x18^ \x01(\tH.\x88\x01\x01\x12(\n\x1botel_exporter_otlp_protocol\x18_ \x01(\tH/\x88\x01\x01\x12/\n\"otel_exporter_otlp_traces_protocol\x18` \x01(\tH0\x88\x01\x01\x12\"\n\x1aotel_exporter_otlp_headers\x18\x61 \x03(\t\x12)\n!otel_exporter_otlp_traces_headers\x18\x62 \x03(\t\x12\x42\n\x1aotel_exporter_otlp_timeout\x18\x63 \x01(\x0b\x32\x19.google.protobuf.DurationH1\x88\x01\x01\x12I\n!otel_exporter_otlp_traces_timeout\x18\x64 \x01(\x0b\x32\x19.google.protobuf.DurationH2\x88\x01\x01\x12?\n\x17otel_bsp_schedule_delay\x18\x65 \x01(\x0b\x32\x19.google.protobuf.DurationH3\x88\x01\x01\x12+\n\x1eotel_bsp_max_export_batch_size\x18\x66 \x01(\x05H4\x88\x01\x01\x12\x19\n\x0cgrpc_address\x18. \x01(\tH5\x88\x01\x01\x12\x1a\n\rgrpc_insecure\x18/ \x01(\x08H6\x88\x01\x01\x12\x1e\n\x11\x63\x61\x63he_service_url\x18\x33 \x01(\tH7\x88\x01\x01\x12#\n\x16\x64\x61tabroker_service_url\x18\x34 \x01(\tH8\x88\x01\x01\x12\x16\n\tclient_ca\x18\x35 \x01(\tH9\x88\x01\x01\x12\x1b\n\x0e\x63lient_ca_file\x18\x36 \x01(\tH:\x88\x01\x01\x12\"\n\x15\x63lient_ca_key_pair_id\x18\x41 \x01(\tH;\x88\x01\x01\x12\x43\n6google_cloud_serverless_authentication_service_account\x18\x37 \x01(\tH<\x88\x01\x01\x12\x15\n\x08\x61utocert\x18\x38 \x01(\x08H=\x88\x01\x01\x12!\n\x14\x61utocert_use_staging\x18\x39 \x01(\x08H>\x88\x01\x01\x12!\n\x14\x61utocert_must_staple\x18: \x01(\x08H?\x88\x01\x01\x12\x19\n\x0c\x61utocert_dir\x18; \x01(\tH@\x88\x01\x01\x12\x1c\n\x0fskip_xff_append\x18? \x01(\x08HA\x88\x01\x01\x12\x1a\n\rprimary_color\x18\x45 \x01(\tHB\x88\x01\x01\x12\x1c\n\x0fsecondary_color\x18\x46 \x01(\tHC\x88\x01\x01\x12#\n\x16\x64\x61rkmode_primary_color\x18G \x01(\tHD\x88\x01\x01\x12%\n\x18\x64\x61rkmode_secondary_color\x18H \x01(\tHE\x88\x01\x01\x12\x15\n\x08logo_url\x18I \x01(\tHF\x88\x01\x01\x12\x18\n\x0b\x66\x61vicon_url\x18J \x01(\tHG\x88\x01\x01\x12*\n\x1d\x65rror_message_first_paragraph\x18K \x01(\tHH\x88\x01\x01\x12\x1e\n\x11identity_provider\x18L \x01(\tHI\x88\x01\x01\x12?\n\x19identity_provider_options\x18M \x01(\x0b\x32\x17.google.protobuf.StructHJ\x88\x01\x01\x12J\n\"identity_provider_refresh_interval\x18N \x01(\x0b\x32\x19.google.protobuf.DurationHK\x88\x01\x01\x12I\n!identity_provider_refresh_timeout\x18O \x01(\x0b\x32\x19.google.protobuf.DurationHL\x88\x01\x01\x12G\n\x11\x61\x63\x63\x65ss_log_fields\x18R \x01(\x0b\x32\'.pomerium.dashboard.Settings.StringListHM\x88\x01\x01\x12J\n\x14\x61uthorize_log_fields\x18S \x01(\x0b\x32\'.pomerium.dashboard.Settings.StringListHN\x88\x01\x01\x12\"\n\x15pass_identity_headers\x18T \x01(\x08HO\x88\x01\x01\x12\x15\n\roriginator_id\x18g \x01(\t\x12G\n\x13\x62\x65\x61rer_token_format\x18h \x01(\x0e\x32%.pomerium.dashboard.BearerTokenFormatHP\x88\x01\x01\x12X\n\"idp_access_token_allowed_audiences\x18i \x01(\x0b\x32\'.pomerium.dashboard.Settings.StringListHQ\x88\x01\x01\x12\x36\n\ncodec_type\x18m \x01(\x0e\x32\x1d.pomerium.dashboard.CodecTypeHR\x88\x01\x01\x12U\n\x1a\x63ircuit_breaker_thresholds\x18n \x01(\x0b\x32,.pomerium.dashboard.CircuitBreakerThresholdsHS\x88\x01\x01\x12\x18\n\x0bssh_address\x18o \x01(\tHT\x88\x01\x01\x12H\n\x12ssh_host_key_files\x18p \x01(\x0b\x32\'.pomerium.dashboard.Settings.StringListHU\x88\x01\x01\x12\x43\n\rssh_host_keys\x18q \x01(\x0b\x32\'.pomerium.dashboard.Settings.StringListHV\x88\x01\x01\x12!\n\x14ssh_user_ca_key_file\x18r \x01(\tHW\x88\x01\x01\x12\x1c\n\x0fssh_user_ca_key\x18s \x01(\tHX\x88\x01\x01\x12S\n\x1dmcp_allowed_client_id_domains\x18z \x01(\x0b\x32\'.pomerium.dashboard.Settings.StringListHY\x88\x01\x01\x1aI\n\x0b\x43\x65rtificate\x12\x12\n\ncert_bytes\x18\x03 \x01(\x0c\x12\x11\n\tkey_bytes\x18\x04 \x01(\x0c\x12\x13\n\x0bkey_pair_id\x18\x05 \x01(\t\x1a\x1c\n\nStringList\x12\x0e\n\x06values\x18\x01 \x03(\t\x1a\x34\n\x12RequestParamsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a\x39\n\x17SetResponseHeadersEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a\x37\n\x15JwtClaimsHeadersEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x42\r\n\x0b_cluster_idB\x12\n\x10_installation_idB\x0c\n\n_log_levelB\x12\n\x10_proxy_log_levelB\x10\n\x0e_shared_secretB\x0b\n\t_servicesB\n\n\x08_addressB\x12\n\x10_insecure_serverB\x1b\n\x19_dns_failure_refresh_rateB\x14\n\x12_dns_lookup_familyB\x14\n\x12_dns_query_timeoutB\x12\n\x10_dns_query_triesB\x13\n\x11_dns_refresh_rateB\x16\n\x14_dns_udp_max_queriesB\x0e\n\x0c_dns_use_tcpB\x15\n\x13_http_redirect_addrB\x0f\n\r_timeout_readB\x10\n\x0e_timeout_writeB\x0f\n\r_timeout_idleB\x1b\n\x19_authenticate_service_urlB\x0e\n\x0c_cookie_nameB\x10\n\x0e_cookie_secretB\x10\n\x0e_cookie_domainB\x10\n\x0e_cookie_secureB\x13\n\x11_cookie_http_onlyB\x13\n\x11_cookie_same_siteB\x10\n\x0e_cookie_expireB\x10\n\x0e_idp_client_idB\x14\n\x12_idp_client_secretB\x0f\n\r_idp_providerB\x13\n\x11_idp_provider_urlB\x16\n\x14_idp_service_accountB \n\x1e_idp_refresh_directory_timeoutB!\n\x1f_idp_refresh_directory_intervalB\x18\n\x16_authorize_service_urlB\x18\n\x16_certificate_authorityB\x1d\n\x1b_certificate_authority_fileB$\n\"_certificate_authority_key_pair_idB\x14\n\x12_jwt_issuer_formatB\x1b\n\x19_default_upstream_timeoutB\x12\n\x10_metrics_addressB\x17\n\x15_otel_traces_exporterB\x1a\n\x18_otel_traces_sampler_argB\x11\n\x0f_otel_log_levelB$\n\"_otel_attribute_value_length_limitB\x1e\n\x1c_otel_exporter_otlp_endpointB%\n#_otel_exporter_otlp_traces_endpointB\x1e\n\x1c_otel_exporter_otlp_protocolB%\n#_otel_exporter_otlp_traces_protocolB\x1d\n\x1b_otel_exporter_otlp_timeoutB$\n\"_otel_exporter_otlp_traces_timeoutB\x1a\n\x18_otel_bsp_schedule_delayB!\n\x1f_otel_bsp_max_export_batch_sizeB\x0f\n\r_grpc_addressB\x10\n\x0e_grpc_insecureB\x14\n\x12_cache_service_urlB\x19\n\x17_databroker_service_urlB\x0c\n\n_client_caB\x11\n\x0f_client_ca_fileB\x18\n\x16_client_ca_key_pair_idB9\n7_google_cloud_serverless_authentication_service_accountB\x0b\n\t_autocertB\x17\n\x15_autocert_use_stagingB\x17\n\x15_autocert_must_stapleB\x0f\n\r_autocert_dirB\x12\n\x10_skip_xff_appendB\x10\n\x0e_primary_colorB\x12\n\x10_secondary_colorB\x19\n\x17_darkmode_primary_colorB\x1b\n\x19_darkmode_secondary_colorB\x0b\n\t_logo_urlB\x0e\n\x0c_favicon_urlB \n\x1e_error_message_first_paragraphB\x14\n\x12_identity_providerB\x1c\n\x1a_identity_provider_optionsB%\n#_identity_provider_refresh_intervalB$\n\"_identity_provider_refresh_timeoutB\x14\n\x12_access_log_fieldsB\x17\n\x15_authorize_log_fieldsB\x18\n\x16_pass_identity_headersB\x16\n\x14_bearer_token_formatB%\n#_idp_access_token_allowed_audiencesB\r\n\x0b_codec_typeB\x1d\n\x1b_circuit_breaker_thresholdsB\x0e\n\x0c_ssh_addressB\x15\n\x13_ssh_host_key_filesB\x10\n\x0e_ssh_host_keysB\x17\n\x15_ssh_user_ca_key_fileB\x12\n\x10_ssh_user_ca_keyB \n\x1e_mcp_allowed_client_id_domainsJ\x04\x08\x0f\x10\x10J\x04\x08)\x10*J\x04\x08*\x10+J\x04\x08U\x10VJ\x04\x08V\x10W\"\x1b\n\x19GetConsoleSettingsRequest\"[\n\x1aGetConsoleSettingsResponse\x12=\n\x10\x63onsole_settings\x18\x01 \x01(\x0b\x32#.pomerium.dashboard.ConsoleSettings\"<\n\x12GetSettingsRequest\x12\x17\n\ncluster_id\x18\x01 \x01(\tH\x00\x88\x01\x01\x42\r\n\x0b_cluster_id\"E\n\x13GetSettingsResponse\x12.\n\x08settings\x18\x01 \x01(\x0b\x32\x1c.pomerium.dashboard.Settings\"D\n\x12SetSettingsRequest\x12.\n\x08settings\x18\x01 \x01(\x0b\x32\x1c.pomerium.dashboard.Settings\"E\n\x13SetSettingsResponse\x12.\n\x08settings\x18\x01 \x01(\x0b\x32\x1c.pomerium.dashboard.Settings*z\n\tCodecType\x12\x16\n\x12\x43ODEC_TYPE_UNKNOWN\x10\x00\x12\x13\n\x0f\x43ODEC_TYPE_AUTO\x10\x01\x12\x14\n\x10\x43ODEC_TYPE_HTTP1\x10\x02\x12\x14\n\x10\x43ODEC_TYPE_HTTP2\x10\x03\x12\x14\n\x10\x43ODEC_TYPE_HTTP3\x10\x04\x32\xae\x03\n\x0fSettingsService\x12^\n\x0bGetSettings\x12&.pomerium.dashboard.GetSettingsRequest\x1a\'.pomerium.dashboard.GetSettingsResponse\x12^\n\x0bSetSettings\x12&.pomerium.dashboard.SetSettingsRequest\x1a\'.pomerium.dashboard.SetSettingsResponse\x12\x66\n\x13GetBrandingSettings\x12&.pomerium.dashboard.GetSettingsRequest\x1a\'.pomerium.dashboard.GetSettingsResponse\x12s\n\x12GetConsoleSettings\x12-.pomerium.dashboard.GetConsoleSettingsRequest\x1a..pomerium.dashboard.GetConsoleSettingsResponseB-Z+github.com/pomerium/pomerium-console/pkg/pbb\x06proto3')
 
 _globals = globals()
 _builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
@@ -42,34 +42,34 @@
   _globals['_SETTINGS_SETRESPONSEHEADERSENTRY']._serialized_options = b'8\001'
   _globals['_SETTINGS_JWTCLAIMSHEADERSENTRY']._loaded_options = None
   _globals['_SETTINGS_JWTCLAIMSHEADERSENTRY']._serialized_options = b'8\001'
-  _globals['_CODECTYPE']._serialized_start=7467
-  _globals['_CODECTYPE']._serialized_end=7589
+  _globals['_CODECTYPE']._serialized_start=7586
+  _globals['_CODECTYPE']._serialized_end=7708
   _globals['_CONSOLESETTINGS']._serialized_start=147
   _globals['_CONSOLESETTINGS']._serialized_end=220
   _globals['_SETTINGS']._serialized_start=223
-  _globals['_SETTINGS']._serialized_end=7069
-  _globals['_SETTINGS_CERTIFICATE']._serialized_start=4627
-  _globals['_SETTINGS_CERTIFICATE']._serialized_end=4700
-  _globals['_SETTINGS_STRINGLIST']._serialized_start=4702
-  _globals['_SETTINGS_STRINGLIST']._serialized_end=4730
-  _globals['_SETTINGS_REQUESTPARAMSENTRY']._serialized_start=4732
-  _globals['_SETTINGS_REQUESTPARAMSENTRY']._serialized_end=4784
-  _globals['_SETTINGS_SETRESPONSEHEADERSENTRY']._serialized_start=4786
-  _globals['_SETTINGS_SETRESPONSEHEADERSENTRY']._serialized_end=4843
-  _globals['_SETTINGS_JWTCLAIMSHEADERSENTRY']._serialized_start=4845
-  _globals['_SETTINGS_JWTCLAIMSHEADERSENTRY']._serialized_end=4900
-  _globals['_GETCONSOLESETTINGSREQUEST']._serialized_start=7071
-  _globals['_GETCONSOLESETTINGSREQUEST']._serialized_end=7098
-  _globals['_GETCONSOLESETTINGSRESPONSE']._serialized_start=7100
-  _globals['_GETCONSOLESETTINGSRESPONSE']._serialized_end=7191
-  _globals['_GETSETTINGSREQUEST']._serialized_start=7193
-  _globals['_GETSETTINGSREQUEST']._serialized_end=7253
-  _globals['_GETSETTINGSRESPONSE']._serialized_start=7255
-  _globals['_GETSETTINGSRESPONSE']._serialized_end=7324
-  _globals['_SETSETTINGSREQUEST']._serialized_start=7326
-  _globals['_SETSETTINGSREQUEST']._serialized_end=7394
-  _globals['_SETSETTINGSRESPONSE']._serialized_start=7396
-  _globals['_SETSETTINGSRESPONSE']._serialized_end=7465
-  _globals['_SETTINGSSERVICE']._serialized_start=7592
-  _globals['_SETTINGSSERVICE']._serialized_end=8022
+  _globals['_SETTINGS']._serialized_end=7188
+  _globals['_SETTINGS_CERTIFICATE']._serialized_start=4712
+  _globals['_SETTINGS_CERTIFICATE']._serialized_end=4785
+  _globals['_SETTINGS_STRINGLIST']._serialized_start=4787
+  _globals['_SETTINGS_STRINGLIST']._serialized_end=4815
+  _globals['_SETTINGS_REQUESTPARAMSENTRY']._serialized_start=4817
+  _globals['_SETTINGS_REQUESTPARAMSENTRY']._serialized_end=4869
+  _globals['_SETTINGS_SETRESPONSEHEADERSENTRY']._serialized_start=4871
+  _globals['_SETTINGS_SETRESPONSEHEADERSENTRY']._serialized_end=4928
+  _globals['_SETTINGS_JWTCLAIMSHEADERSENTRY']._serialized_start=4930
+  _globals['_SETTINGS_JWTCLAIMSHEADERSENTRY']._serialized_end=4985
+  _globals['_GETCONSOLESETTINGSREQUEST']._serialized_start=7190
+  _globals['_GETCONSOLESETTINGSREQUEST']._serialized_end=7217
+  _globals['_GETCONSOLESETTINGSRESPONSE']._serialized_start=7219
+  _globals['_GETCONSOLESETTINGSRESPONSE']._serialized_end=7310
+  _globals['_GETSETTINGSREQUEST']._serialized_start=7312
+  _globals['_GETSETTINGSREQUEST']._serialized_end=7372
+  _globals['_GETSETTINGSRESPONSE']._serialized_start=7374
+  _globals['_GETSETTINGSRESPONSE']._serialized_end=7443
+  _globals['_SETSETTINGSREQUEST']._serialized_start=7445
+  _globals['_SETSETTINGSREQUEST']._serialized_end=7513
+  _globals['_SETSETTINGSRESPONSE']._serialized_start=7515
+  _globals['_SETSETTINGSRESPONSE']._serialized_end=7584
+  _globals['_SETTINGSSERVICE']._serialized_start=7711
+  _globals['_SETTINGSSERVICE']._serialized_end=8141
 # @@protoc_insertion_point(module_scope)
diff --git a/src/pomerium/pb/settings_pb2.pyi b/src/pomerium/pb/settings_pb2.pyi
index 15aa44e..a4371b7 100644
--- a/src/pomerium/pb/settings_pb2.pyi
+++ b/src/pomerium/pb/settings_pb2.pyi
@@ -65,7 +65,7 @@ global___ConsoleSettings = ConsoleSettings
 @typing.final
 class Settings(google.protobuf.message.Message):
     """Settings defines the global pomerium settings
-    Next id: 122.
+    Next id: 123.
     """
 
     DESCRIPTOR: google.protobuf.descriptor.Descriptor
@@ -252,6 +252,7 @@ class Settings(google.protobuf.message.Message):
     SSH_HOST_KEYS_FIELD_NUMBER: builtins.int
     SSH_USER_CA_KEY_FILE_FIELD_NUMBER: builtins.int
     SSH_USER_CA_KEY_FIELD_NUMBER: builtins.int
+    MCP_ALLOWED_CLIENT_ID_DOMAINS_FIELD_NUMBER: builtins.int
     id: builtins.str
     cluster_id: builtins.str
     installation_id: builtins.str
@@ -387,6 +388,8 @@ class Settings(google.protobuf.message.Message):
     def ssh_host_key_files(self) -> global___Settings.StringList: ...
     @property
     def ssh_host_keys(self) -> global___Settings.StringList: ...
+    @property
+    def mcp_allowed_client_id_domains(self) -> global___Settings.StringList: ...
     def __init__(
         self,
         *,
@@ -491,9 +494,10 @@ class Settings(google.protobuf.message.Message):
         ssh_host_keys: global___Settings.StringList | None = ...,
         ssh_user_ca_key_file: builtins.str | None = ...,
         ssh_user_ca_key: builtins.str | None = ...,
+        mcp_allowed_client_id_domains: global___Settings.StringList | None = ...,
     ) -> None: ...
-    def HasField(self, field_name: typing.Literal["_access_log_fields", b"_access_log_fields", "_address", b"_address", "_authenticate_service_url", b"_authenticate_service_url", "_authorize_log_fields", b"_authorize_log_fields", "_authorize_service_url", b"_authorize_service_url", "_autocert", b"_autocert", "_autocert_dir", b"_autocert_dir", "_autocert_must_staple", b"_autocert_must_staple", "_autocert_use_staging", b"_autocert_use_staging", "_bearer_token_format", b"_bearer_token_format", "_cache_service_url", b"_cache_service_url", "_certificate_authority", b"_certificate_authority", "_certificate_authority_file", b"_certificate_authority_file", "_certificate_authority_key_pair_id", b"_certificate_authority_key_pair_id", "_circuit_breaker_thresholds", b"_circuit_breaker_thresholds", "_client_ca", b"_client_ca", "_client_ca_file", b"_client_ca_file", "_client_ca_key_pair_id", b"_client_ca_key_pair_id", "_cluster_id", b"_cluster_id", "_codec_type", b"_codec_type", "_cookie_domain", b"_cookie_domain", "_cookie_expire", b"_cookie_expire", "_cookie_http_only", b"_cookie_http_only", "_cookie_name", b"_cookie_name", "_cookie_same_site", b"_cookie_same_site", "_cookie_secret", b"_cookie_secret", "_cookie_secure", b"_cookie_secure", "_darkmode_primary_color", b"_darkmode_primary_color", "_darkmode_secondary_color", b"_darkmode_secondary_color", "_databroker_service_url", b"_databroker_service_url", "_default_upstream_timeout", b"_default_upstream_timeout", "_dns_failure_refresh_rate", b"_dns_failure_refresh_rate", "_dns_lookup_family", b"_dns_lookup_family", "_dns_query_timeout", b"_dns_query_timeout", "_dns_query_tries", b"_dns_query_tries", "_dns_refresh_rate", b"_dns_refresh_rate", "_dns_udp_max_queries", b"_dns_udp_max_queries", "_dns_use_tcp", b"_dns_use_tcp", "_error_message_first_paragraph", b"_error_message_first_paragraph", "_favicon_url", b"_favicon_url", "_google_cloud_serverless_authentication_service_account", b"_google_cloud_serverless_authentication_service_account", "_grpc_address", b"_grpc_address", "_grpc_insecure", b"_grpc_insecure", "_http_redirect_addr", b"_http_redirect_addr", "_identity_provider", b"_identity_provider", "_identity_provider_options", b"_identity_provider_options", "_identity_provider_refresh_interval", b"_identity_provider_refresh_interval", "_identity_provider_refresh_timeout", b"_identity_provider_refresh_timeout", "_idp_access_token_allowed_audiences", b"_idp_access_token_allowed_audiences", "_idp_client_id", b"_idp_client_id", "_idp_client_secret", b"_idp_client_secret", "_idp_provider", b"_idp_provider", "_idp_provider_url", b"_idp_provider_url", "_idp_refresh_directory_interval", b"_idp_refresh_directory_interval", "_idp_refresh_directory_timeout", b"_idp_refresh_directory_timeout", "_idp_service_account", b"_idp_service_account", "_insecure_server", b"_insecure_server", "_installation_id", b"_installation_id", "_jwt_issuer_format", b"_jwt_issuer_format", "_log_level", b"_log_level", "_logo_url", b"_logo_url", "_metrics_address", b"_metrics_address", "_otel_attribute_value_length_limit", b"_otel_attribute_value_length_limit", "_otel_bsp_max_export_batch_size", b"_otel_bsp_max_export_batch_size", "_otel_bsp_schedule_delay", b"_otel_bsp_schedule_delay", "_otel_exporter_otlp_endpoint", b"_otel_exporter_otlp_endpoint", "_otel_exporter_otlp_protocol", b"_otel_exporter_otlp_protocol", "_otel_exporter_otlp_timeout", b"_otel_exporter_otlp_timeout", "_otel_exporter_otlp_traces_endpoint", b"_otel_exporter_otlp_traces_endpoint", "_otel_exporter_otlp_traces_protocol", b"_otel_exporter_otlp_traces_protocol", "_otel_exporter_otlp_traces_timeout", b"_otel_exporter_otlp_traces_timeout", "_otel_log_level", b"_otel_log_level", "_otel_traces_exporter", b"_otel_traces_exporter", "_otel_traces_sampler_arg", b"_otel_traces_sampler_arg", "_pass_identity_headers", b"_pass_identity_headers", "_primary_color", b"_primary_color", "_proxy_log_level", b"_proxy_log_level", "_secondary_color", b"_secondary_color", "_services", b"_services", "_shared_secret", b"_shared_secret", "_skip_xff_append", b"_skip_xff_append", "_ssh_address", b"_ssh_address", "_ssh_host_key_files", b"_ssh_host_key_files", "_ssh_host_keys", b"_ssh_host_keys", "_ssh_user_ca_key", b"_ssh_user_ca_key", "_ssh_user_ca_key_file", b"_ssh_user_ca_key_file", "_timeout_idle", b"_timeout_idle", "_timeout_read", b"_timeout_read", "_timeout_write", b"_timeout_write", "access_log_fields", b"access_log_fields", "address", b"address", "authenticate_service_url", b"authenticate_service_url", "authorize_log_fields", b"authorize_log_fields", "authorize_service_url", b"authorize_service_url", "autocert", b"autocert", "autocert_dir", b"autocert_dir", "autocert_must_staple", b"autocert_must_staple", "autocert_use_staging", b"autocert_use_staging", "bearer_token_format", b"bearer_token_format", "cache_service_url", b"cache_service_url", "certificate_authority", b"certificate_authority", "certificate_authority_file", b"certificate_authority_file", "certificate_authority_key_pair_id", b"certificate_authority_key_pair_id", "circuit_breaker_thresholds", b"circuit_breaker_thresholds", "client_ca", b"client_ca", "client_ca_file", b"client_ca_file", "client_ca_key_pair_id", b"client_ca_key_pair_id", "cluster_id", b"cluster_id", "codec_type", b"codec_type", "cookie_domain", b"cookie_domain", "cookie_expire", b"cookie_expire", "cookie_http_only", b"cookie_http_only", "cookie_name", b"cookie_name", "cookie_same_site", b"cookie_same_site", "cookie_secret", b"cookie_secret", "cookie_secure", b"cookie_secure", "darkmode_primary_color", b"darkmode_primary_color", "darkmode_secondary_color", b"darkmode_secondary_color", "databroker_service_url", b"databroker_service_url", "default_upstream_timeout", b"default_upstream_timeout", "dns_failure_refresh_rate", b"dns_failure_refresh_rate", "dns_lookup_family", b"dns_lookup_family", "dns_query_timeout", b"dns_query_timeout", "dns_query_tries", b"dns_query_tries", "dns_refresh_rate", b"dns_refresh_rate", "dns_udp_max_queries", b"dns_udp_max_queries", "dns_use_tcp", b"dns_use_tcp", "error_message_first_paragraph", b"error_message_first_paragraph", "favicon_url", b"favicon_url", "google_cloud_serverless_authentication_service_account", b"google_cloud_serverless_authentication_service_account", "grpc_address", b"grpc_address", "grpc_insecure", b"grpc_insecure", "http_redirect_addr", b"http_redirect_addr", "identity_provider", b"identity_provider", "identity_provider_options", b"identity_provider_options", "identity_provider_refresh_interval", b"identity_provider_refresh_interval", "identity_provider_refresh_timeout", b"identity_provider_refresh_timeout", "idp_access_token_allowed_audiences", b"idp_access_token_allowed_audiences", "idp_client_id", b"idp_client_id", "idp_client_secret", b"idp_client_secret", "idp_provider", b"idp_provider", "idp_provider_url", b"idp_provider_url", "idp_refresh_directory_interval", b"idp_refresh_directory_interval", "idp_refresh_directory_timeout", b"idp_refresh_directory_timeout", "idp_service_account", b"idp_service_account", "insecure_server", b"insecure_server", "installation_id", b"installation_id", "jwt_groups_filter", b"jwt_groups_filter", "jwt_issuer_format", b"jwt_issuer_format", "log_level", b"log_level", "logo_url", b"logo_url", "metrics_address", b"metrics_address", "modified_at", b"modified_at", "otel_attribute_value_length_limit", b"otel_attribute_value_length_limit", "otel_bsp_max_export_batch_size", b"otel_bsp_max_export_batch_size", "otel_bsp_schedule_delay", b"otel_bsp_schedule_delay", "otel_exporter_otlp_endpoint", b"otel_exporter_otlp_endpoint", "otel_exporter_otlp_protocol", b"otel_exporter_otlp_protocol", "otel_exporter_otlp_timeout", b"otel_exporter_otlp_timeout", "otel_exporter_otlp_traces_endpoint", b"otel_exporter_otlp_traces_endpoint", "otel_exporter_otlp_traces_protocol", b"otel_exporter_otlp_traces_protocol", "otel_exporter_otlp_traces_timeout", b"otel_exporter_otlp_traces_timeout", "otel_log_level", b"otel_log_level", "otel_traces_exporter", b"otel_traces_exporter", "otel_traces_sampler_arg", b"otel_traces_sampler_arg", "pass_identity_headers", b"pass_identity_headers", "primary_color", b"primary_color", "proxy_log_level", b"proxy_log_level", "secondary_color", b"secondary_color", "services", b"services", "shared_secret", b"shared_secret", "skip_xff_append", b"skip_xff_append", "ssh_address", b"ssh_address", "ssh_host_key_files", b"ssh_host_key_files", "ssh_host_keys", b"ssh_host_keys", "ssh_user_ca_key", b"ssh_user_ca_key", "ssh_user_ca_key_file", b"ssh_user_ca_key_file", "timeout_idle", b"timeout_idle", "timeout_read", b"timeout_read", "timeout_write", b"timeout_write"]) -> builtins.bool: ...
-    def ClearField(self, field_name: typing.Literal["_access_log_fields", b"_access_log_fields", "_address", b"_address", "_authenticate_service_url", b"_authenticate_service_url", "_authorize_log_fields", b"_authorize_log_fields", "_authorize_service_url", b"_authorize_service_url", "_autocert", b"_autocert", "_autocert_dir", b"_autocert_dir", "_autocert_must_staple", b"_autocert_must_staple", "_autocert_use_staging", b"_autocert_use_staging", "_bearer_token_format", b"_bearer_token_format", "_cache_service_url", b"_cache_service_url", "_certificate_authority", b"_certificate_authority", "_certificate_authority_file", b"_certificate_authority_file", "_certificate_authority_key_pair_id", b"_certificate_authority_key_pair_id", "_circuit_breaker_thresholds", b"_circuit_breaker_thresholds", "_client_ca", b"_client_ca", "_client_ca_file", b"_client_ca_file", "_client_ca_key_pair_id", b"_client_ca_key_pair_id", "_cluster_id", b"_cluster_id", "_codec_type", b"_codec_type", "_cookie_domain", b"_cookie_domain", "_cookie_expire", b"_cookie_expire", "_cookie_http_only", b"_cookie_http_only", "_cookie_name", b"_cookie_name", "_cookie_same_site", b"_cookie_same_site", "_cookie_secret", b"_cookie_secret", "_cookie_secure", b"_cookie_secure", "_darkmode_primary_color", b"_darkmode_primary_color", "_darkmode_secondary_color", b"_darkmode_secondary_color", "_databroker_service_url", b"_databroker_service_url", "_default_upstream_timeout", b"_default_upstream_timeout", "_dns_failure_refresh_rate", b"_dns_failure_refresh_rate", "_dns_lookup_family", b"_dns_lookup_family", "_dns_query_timeout", b"_dns_query_timeout", "_dns_query_tries", b"_dns_query_tries", "_dns_refresh_rate", b"_dns_refresh_rate", "_dns_udp_max_queries", b"_dns_udp_max_queries", "_dns_use_tcp", b"_dns_use_tcp", "_error_message_first_paragraph", b"_error_message_first_paragraph", "_favicon_url", b"_favicon_url", "_google_cloud_serverless_authentication_service_account", b"_google_cloud_serverless_authentication_service_account", "_grpc_address", b"_grpc_address", "_grpc_insecure", b"_grpc_insecure", "_http_redirect_addr", b"_http_redirect_addr", "_identity_provider", b"_identity_provider", "_identity_provider_options", b"_identity_provider_options", "_identity_provider_refresh_interval", b"_identity_provider_refresh_interval", "_identity_provider_refresh_timeout", b"_identity_provider_refresh_timeout", "_idp_access_token_allowed_audiences", b"_idp_access_token_allowed_audiences", "_idp_client_id", b"_idp_client_id", "_idp_client_secret", b"_idp_client_secret", "_idp_provider", b"_idp_provider", "_idp_provider_url", b"_idp_provider_url", "_idp_refresh_directory_interval", b"_idp_refresh_directory_interval", "_idp_refresh_directory_timeout", b"_idp_refresh_directory_timeout", "_idp_service_account", b"_idp_service_account", "_insecure_server", b"_insecure_server", "_installation_id", b"_installation_id", "_jwt_issuer_format", b"_jwt_issuer_format", "_log_level", b"_log_level", "_logo_url", b"_logo_url", "_metrics_address", b"_metrics_address", "_otel_attribute_value_length_limit", b"_otel_attribute_value_length_limit", "_otel_bsp_max_export_batch_size", b"_otel_bsp_max_export_batch_size", "_otel_bsp_schedule_delay", b"_otel_bsp_schedule_delay", "_otel_exporter_otlp_endpoint", b"_otel_exporter_otlp_endpoint", "_otel_exporter_otlp_protocol", b"_otel_exporter_otlp_protocol", "_otel_exporter_otlp_timeout", b"_otel_exporter_otlp_timeout", "_otel_exporter_otlp_traces_endpoint", b"_otel_exporter_otlp_traces_endpoint", "_otel_exporter_otlp_traces_protocol", b"_otel_exporter_otlp_traces_protocol", "_otel_exporter_otlp_traces_timeout", b"_otel_exporter_otlp_traces_timeout", "_otel_log_level", b"_otel_log_level", "_otel_traces_exporter", b"_otel_traces_exporter", "_otel_traces_sampler_arg", b"_otel_traces_sampler_arg", "_pass_identity_headers", b"_pass_identity_headers", "_primary_color", b"_primary_color", "_proxy_log_level", b"_proxy_log_level", "_secondary_color", b"_secondary_color", "_services", b"_services", "_shared_secret", b"_shared_secret", "_skip_xff_append", b"_skip_xff_append", "_ssh_address", b"_ssh_address", "_ssh_host_key_files", b"_ssh_host_key_files", "_ssh_host_keys", b"_ssh_host_keys", "_ssh_user_ca_key", b"_ssh_user_ca_key", "_ssh_user_ca_key_file", b"_ssh_user_ca_key_file", "_timeout_idle", b"_timeout_idle", "_timeout_read", b"_timeout_read", "_timeout_write", b"_timeout_write", "access_log_fields", b"access_log_fields", "address", b"address", "authenticate_service_url", b"authenticate_service_url", "authorize_log_fields", b"authorize_log_fields", "authorize_service_url", b"authorize_service_url", "autocert", b"autocert", "autocert_dir", b"autocert_dir", "autocert_must_staple", b"autocert_must_staple", "autocert_use_staging", b"autocert_use_staging", "bearer_token_format", b"bearer_token_format", "cache_service_url", b"cache_service_url", "certificate_authority", b"certificate_authority", "certificate_authority_file", b"certificate_authority_file", "certificate_authority_key_pair_id", b"certificate_authority_key_pair_id", "certificates", b"certificates", "circuit_breaker_thresholds", b"circuit_breaker_thresholds", "client_ca", b"client_ca", "client_ca_file", b"client_ca_file", "client_ca_key_pair_id", b"client_ca_key_pair_id", "cluster_id", b"cluster_id", "codec_type", b"codec_type", "cookie_domain", b"cookie_domain", "cookie_expire", b"cookie_expire", "cookie_http_only", b"cookie_http_only", "cookie_name", b"cookie_name", "cookie_same_site", b"cookie_same_site", "cookie_secret", b"cookie_secret", "cookie_secure", b"cookie_secure", "darkmode_primary_color", b"darkmode_primary_color", "darkmode_secondary_color", b"darkmode_secondary_color", "databroker_service_url", b"databroker_service_url", "default_upstream_timeout", b"default_upstream_timeout", "dns_failure_refresh_rate", b"dns_failure_refresh_rate", "dns_lookup_family", b"dns_lookup_family", "dns_query_timeout", b"dns_query_timeout", "dns_query_tries", b"dns_query_tries", "dns_refresh_rate", b"dns_refresh_rate", "dns_udp_max_queries", b"dns_udp_max_queries", "dns_use_tcp", b"dns_use_tcp", "error_message_first_paragraph", b"error_message_first_paragraph", "favicon_url", b"favicon_url", "google_cloud_serverless_authentication_service_account", b"google_cloud_serverless_authentication_service_account", "grpc_address", b"grpc_address", "grpc_insecure", b"grpc_insecure", "http_redirect_addr", b"http_redirect_addr", "id", b"id", "identity_provider", b"identity_provider", "identity_provider_options", b"identity_provider_options", "identity_provider_refresh_interval", b"identity_provider_refresh_interval", "identity_provider_refresh_timeout", b"identity_provider_refresh_timeout", "idp_access_token_allowed_audiences", b"idp_access_token_allowed_audiences", "idp_client_id", b"idp_client_id", "idp_client_secret", b"idp_client_secret", "idp_provider", b"idp_provider", "idp_provider_url", b"idp_provider_url", "idp_refresh_directory_interval", b"idp_refresh_directory_interval", "idp_refresh_directory_timeout", b"idp_refresh_directory_timeout", "idp_service_account", b"idp_service_account", "insecure_server", b"insecure_server", "installation_id", b"installation_id", "jwt_claims_headers", b"jwt_claims_headers", "jwt_groups_filter", b"jwt_groups_filter", "jwt_issuer_format", b"jwt_issuer_format", "log_level", b"log_level", "logo_url", b"logo_url", "metrics_address", b"metrics_address", "modified_at", b"modified_at", "originator_id", b"originator_id", "otel_attribute_value_length_limit", b"otel_attribute_value_length_limit", "otel_bsp_max_export_batch_size", b"otel_bsp_max_export_batch_size", "otel_bsp_schedule_delay", b"otel_bsp_schedule_delay", "otel_exporter_otlp_endpoint", b"otel_exporter_otlp_endpoint", "otel_exporter_otlp_headers", b"otel_exporter_otlp_headers", "otel_exporter_otlp_protocol", b"otel_exporter_otlp_protocol", "otel_exporter_otlp_timeout", b"otel_exporter_otlp_timeout", "otel_exporter_otlp_traces_endpoint", b"otel_exporter_otlp_traces_endpoint", "otel_exporter_otlp_traces_headers", b"otel_exporter_otlp_traces_headers", "otel_exporter_otlp_traces_protocol", b"otel_exporter_otlp_traces_protocol", "otel_exporter_otlp_traces_timeout", b"otel_exporter_otlp_traces_timeout", "otel_log_level", b"otel_log_level", "otel_resource_attributes", b"otel_resource_attributes", "otel_traces_exporter", b"otel_traces_exporter", "otel_traces_sampler_arg", b"otel_traces_sampler_arg", "pass_identity_headers", b"pass_identity_headers", "primary_color", b"primary_color", "proxy_log_level", b"proxy_log_level", "request_params", b"request_params", "scopes", b"scopes", "secondary_color", b"secondary_color", "services", b"services", "set_response_headers", b"set_response_headers", "shared_secret", b"shared_secret", "skip_xff_append", b"skip_xff_append", "ssh_address", b"ssh_address", "ssh_host_key_files", b"ssh_host_key_files", "ssh_host_keys", b"ssh_host_keys", "ssh_user_ca_key", b"ssh_user_ca_key", "ssh_user_ca_key_file", b"ssh_user_ca_key_file", "timeout_idle", b"timeout_idle", "timeout_read", b"timeout_read", "timeout_write", b"timeout_write"]) -> None: ...
+    def HasField(self, field_name: typing.Literal["_access_log_fields", b"_access_log_fields", "_address", b"_address", "_authenticate_service_url", b"_authenticate_service_url", "_authorize_log_fields", b"_authorize_log_fields", "_authorize_service_url", b"_authorize_service_url", "_autocert", b"_autocert", "_autocert_dir", b"_autocert_dir", "_autocert_must_staple", b"_autocert_must_staple", "_autocert_use_staging", b"_autocert_use_staging", "_bearer_token_format", b"_bearer_token_format", "_cache_service_url", b"_cache_service_url", "_certificate_authority", b"_certificate_authority", "_certificate_authority_file", b"_certificate_authority_file", "_certificate_authority_key_pair_id", b"_certificate_authority_key_pair_id", "_circuit_breaker_thresholds", b"_circuit_breaker_thresholds", "_client_ca", b"_client_ca", "_client_ca_file", b"_client_ca_file", "_client_ca_key_pair_id", b"_client_ca_key_pair_id", "_cluster_id", b"_cluster_id", "_codec_type", b"_codec_type", "_cookie_domain", b"_cookie_domain", "_cookie_expire", b"_cookie_expire", "_cookie_http_only", b"_cookie_http_only", "_cookie_name", b"_cookie_name", "_cookie_same_site", b"_cookie_same_site", "_cookie_secret", b"_cookie_secret", "_cookie_secure", b"_cookie_secure", "_darkmode_primary_color", b"_darkmode_primary_color", "_darkmode_secondary_color", b"_darkmode_secondary_color", "_databroker_service_url", b"_databroker_service_url", "_default_upstream_timeout", b"_default_upstream_timeout", "_dns_failure_refresh_rate", b"_dns_failure_refresh_rate", "_dns_lookup_family", b"_dns_lookup_family", "_dns_query_timeout", b"_dns_query_timeout", "_dns_query_tries", b"_dns_query_tries", "_dns_refresh_rate", b"_dns_refresh_rate", "_dns_udp_max_queries", b"_dns_udp_max_queries", "_dns_use_tcp", b"_dns_use_tcp", "_error_message_first_paragraph", b"_error_message_first_paragraph", "_favicon_url", b"_favicon_url", "_google_cloud_serverless_authentication_service_account", b"_google_cloud_serverless_authentication_service_account", "_grpc_address", b"_grpc_address", "_grpc_insecure", b"_grpc_insecure", "_http_redirect_addr", b"_http_redirect_addr", "_identity_provider", b"_identity_provider", "_identity_provider_options", b"_identity_provider_options", "_identity_provider_refresh_interval", b"_identity_provider_refresh_interval", "_identity_provider_refresh_timeout", b"_identity_provider_refresh_timeout", "_idp_access_token_allowed_audiences", b"_idp_access_token_allowed_audiences", "_idp_client_id", b"_idp_client_id", "_idp_client_secret", b"_idp_client_secret", "_idp_provider", b"_idp_provider", "_idp_provider_url", b"_idp_provider_url", "_idp_refresh_directory_interval", b"_idp_refresh_directory_interval", "_idp_refresh_directory_timeout", b"_idp_refresh_directory_timeout", "_idp_service_account", b"_idp_service_account", "_insecure_server", b"_insecure_server", "_installation_id", b"_installation_id", "_jwt_issuer_format", b"_jwt_issuer_format", "_log_level", b"_log_level", "_logo_url", b"_logo_url", "_mcp_allowed_client_id_domains", b"_mcp_allowed_client_id_domains", "_metrics_address", b"_metrics_address", "_otel_attribute_value_length_limit", b"_otel_attribute_value_length_limit", "_otel_bsp_max_export_batch_size", b"_otel_bsp_max_export_batch_size", "_otel_bsp_schedule_delay", b"_otel_bsp_schedule_delay", "_otel_exporter_otlp_endpoint", b"_otel_exporter_otlp_endpoint", "_otel_exporter_otlp_protocol", b"_otel_exporter_otlp_protocol", "_otel_exporter_otlp_timeout", b"_otel_exporter_otlp_timeout", "_otel_exporter_otlp_traces_endpoint", b"_otel_exporter_otlp_traces_endpoint", "_otel_exporter_otlp_traces_protocol", b"_otel_exporter_otlp_traces_protocol", "_otel_exporter_otlp_traces_timeout", b"_otel_exporter_otlp_traces_timeout", "_otel_log_level", b"_otel_log_level", "_otel_traces_exporter", b"_otel_traces_exporter", "_otel_traces_sampler_arg", b"_otel_traces_sampler_arg", "_pass_identity_headers", b"_pass_identity_headers", "_primary_color", b"_primary_color", "_proxy_log_level", b"_proxy_log_level", "_secondary_color", b"_secondary_color", "_services", b"_services", "_shared_secret", b"_shared_secret", "_skip_xff_append", b"_skip_xff_append", "_ssh_address", b"_ssh_address", "_ssh_host_key_files", b"_ssh_host_key_files", "_ssh_host_keys", b"_ssh_host_keys", "_ssh_user_ca_key", b"_ssh_user_ca_key", "_ssh_user_ca_key_file", b"_ssh_user_ca_key_file", "_timeout_idle", b"_timeout_idle", "_timeout_read", b"_timeout_read", "_timeout_write", b"_timeout_write", "access_log_fields", b"access_log_fields", "address", b"address", "authenticate_service_url", b"authenticate_service_url", "authorize_log_fields", b"authorize_log_fields", "authorize_service_url", b"authorize_service_url", "autocert", b"autocert", "autocert_dir", b"autocert_dir", "autocert_must_staple", b"autocert_must_staple", "autocert_use_staging", b"autocert_use_staging", "bearer_token_format", b"bearer_token_format", "cache_service_url", b"cache_service_url", "certificate_authority", b"certificate_authority", "certificate_authority_file", b"certificate_authority_file", "certificate_authority_key_pair_id", b"certificate_authority_key_pair_id", "circuit_breaker_thresholds", b"circuit_breaker_thresholds", "client_ca", b"client_ca", "client_ca_file", b"client_ca_file", "client_ca_key_pair_id", b"client_ca_key_pair_id", "cluster_id", b"cluster_id", "codec_type", b"codec_type", "cookie_domain", b"cookie_domain", "cookie_expire", b"cookie_expire", "cookie_http_only", b"cookie_http_only", "cookie_name", b"cookie_name", "cookie_same_site", b"cookie_same_site", "cookie_secret", b"cookie_secret", "cookie_secure", b"cookie_secure", "darkmode_primary_color", b"darkmode_primary_color", "darkmode_secondary_color", b"darkmode_secondary_color", "databroker_service_url", b"databroker_service_url", "default_upstream_timeout", b"default_upstream_timeout", "dns_failure_refresh_rate", b"dns_failure_refresh_rate", "dns_lookup_family", b"dns_lookup_family", "dns_query_timeout", b"dns_query_timeout", "dns_query_tries", b"dns_query_tries", "dns_refresh_rate", b"dns_refresh_rate", "dns_udp_max_queries", b"dns_udp_max_queries", "dns_use_tcp", b"dns_use_tcp", "error_message_first_paragraph", b"error_message_first_paragraph", "favicon_url", b"favicon_url", "google_cloud_serverless_authentication_service_account", b"google_cloud_serverless_authentication_service_account", "grpc_address", b"grpc_address", "grpc_insecure", b"grpc_insecure", "http_redirect_addr", b"http_redirect_addr", "identity_provider", b"identity_provider", "identity_provider_options", b"identity_provider_options", "identity_provider_refresh_interval", b"identity_provider_refresh_interval", "identity_provider_refresh_timeout", b"identity_provider_refresh_timeout", "idp_access_token_allowed_audiences", b"idp_access_token_allowed_audiences", "idp_client_id", b"idp_client_id", "idp_client_secret", b"idp_client_secret", "idp_provider", b"idp_provider", "idp_provider_url", b"idp_provider_url", "idp_refresh_directory_interval", b"idp_refresh_directory_interval", "idp_refresh_directory_timeout", b"idp_refresh_directory_timeout", "idp_service_account", b"idp_service_account", "insecure_server", b"insecure_server", "installation_id", b"installation_id", "jwt_groups_filter", b"jwt_groups_filter", "jwt_issuer_format", b"jwt_issuer_format", "log_level", b"log_level", "logo_url", b"logo_url", "mcp_allowed_client_id_domains", b"mcp_allowed_client_id_domains", "metrics_address", b"metrics_address", "modified_at", b"modified_at", "otel_attribute_value_length_limit", b"otel_attribute_value_length_limit", "otel_bsp_max_export_batch_size", b"otel_bsp_max_export_batch_size", "otel_bsp_schedule_delay", b"otel_bsp_schedule_delay", "otel_exporter_otlp_endpoint", b"otel_exporter_otlp_endpoint", "otel_exporter_otlp_protocol", b"otel_exporter_otlp_protocol", "otel_exporter_otlp_timeout", b"otel_exporter_otlp_timeout", "otel_exporter_otlp_traces_endpoint", b"otel_exporter_otlp_traces_endpoint", "otel_exporter_otlp_traces_protocol", b"otel_exporter_otlp_traces_protocol", "otel_exporter_otlp_traces_timeout", b"otel_exporter_otlp_traces_timeout", "otel_log_level", b"otel_log_level", "otel_traces_exporter", b"otel_traces_exporter", "otel_traces_sampler_arg", b"otel_traces_sampler_arg", "pass_identity_headers", b"pass_identity_headers", "primary_color", b"primary_color", "proxy_log_level", b"proxy_log_level", "secondary_color", b"secondary_color", "services", b"services", "shared_secret", b"shared_secret", "skip_xff_append", b"skip_xff_append", "ssh_address", b"ssh_address", "ssh_host_key_files", b"ssh_host_key_files", "ssh_host_keys", b"ssh_host_keys", "ssh_user_ca_key", b"ssh_user_ca_key", "ssh_user_ca_key_file", b"ssh_user_ca_key_file", "timeout_idle", b"timeout_idle", "timeout_read", b"timeout_read", "timeout_write", b"timeout_write"]) -> builtins.bool: ...
+    def ClearField(self, field_name: typing.Literal["_access_log_fields", b"_access_log_fields", "_address", b"_address", "_authenticate_service_url", b"_authenticate_service_url", "_authorize_log_fields", b"_authorize_log_fields", "_authorize_service_url", b"_authorize_service_url", "_autocert", b"_autocert", "_autocert_dir", b"_autocert_dir", "_autocert_must_staple", b"_autocert_must_staple", "_autocert_use_staging", b"_autocert_use_staging", "_bearer_token_format", b"_bearer_token_format", "_cache_service_url", b"_cache_service_url", "_certificate_authority", b"_certificate_authority", "_certificate_authority_file", b"_certificate_authority_file", "_certificate_authority_key_pair_id", b"_certificate_authority_key_pair_id", "_circuit_breaker_thresholds", b"_circuit_breaker_thresholds", "_client_ca", b"_client_ca", "_client_ca_file", b"_client_ca_file", "_client_ca_key_pair_id", b"_client_ca_key_pair_id", "_cluster_id", b"_cluster_id", "_codec_type", b"_codec_type", "_cookie_domain", b"_cookie_domain", "_cookie_expire", b"_cookie_expire", "_cookie_http_only", b"_cookie_http_only", "_cookie_name", b"_cookie_name", "_cookie_same_site", b"_cookie_same_site", "_cookie_secret", b"_cookie_secret", "_cookie_secure", b"_cookie_secure", "_darkmode_primary_color", b"_darkmode_primary_color", "_darkmode_secondary_color", b"_darkmode_secondary_color", "_databroker_service_url", b"_databroker_service_url", "_default_upstream_timeout", b"_default_upstream_timeout", "_dns_failure_refresh_rate", b"_dns_failure_refresh_rate", "_dns_lookup_family", b"_dns_lookup_family", "_dns_query_timeout", b"_dns_query_timeout", "_dns_query_tries", b"_dns_query_tries", "_dns_refresh_rate", b"_dns_refresh_rate", "_dns_udp_max_queries", b"_dns_udp_max_queries", "_dns_use_tcp", b"_dns_use_tcp", "_error_message_first_paragraph", b"_error_message_first_paragraph", "_favicon_url", b"_favicon_url", "_google_cloud_serverless_authentication_service_account", b"_google_cloud_serverless_authentication_service_account", "_grpc_address", b"_grpc_address", "_grpc_insecure", b"_grpc_insecure", "_http_redirect_addr", b"_http_redirect_addr", "_identity_provider", b"_identity_provider", "_identity_provider_options", b"_identity_provider_options", "_identity_provider_refresh_interval", b"_identity_provider_refresh_interval", "_identity_provider_refresh_timeout", b"_identity_provider_refresh_timeout", "_idp_access_token_allowed_audiences", b"_idp_access_token_allowed_audiences", "_idp_client_id", b"_idp_client_id", "_idp_client_secret", b"_idp_client_secret", "_idp_provider", b"_idp_provider", "_idp_provider_url", b"_idp_provider_url", "_idp_refresh_directory_interval", b"_idp_refresh_directory_interval", "_idp_refresh_directory_timeout", b"_idp_refresh_directory_timeout", "_idp_service_account", b"_idp_service_account", "_insecure_server", b"_insecure_server", "_installation_id", b"_installation_id", "_jwt_issuer_format", b"_jwt_issuer_format", "_log_level", b"_log_level", "_logo_url", b"_logo_url", "_mcp_allowed_client_id_domains", b"_mcp_allowed_client_id_domains", "_metrics_address", b"_metrics_address", "_otel_attribute_value_length_limit", b"_otel_attribute_value_length_limit", "_otel_bsp_max_export_batch_size", b"_otel_bsp_max_export_batch_size", "_otel_bsp_schedule_delay", b"_otel_bsp_schedule_delay", "_otel_exporter_otlp_endpoint", b"_otel_exporter_otlp_endpoint", "_otel_exporter_otlp_protocol", b"_otel_exporter_otlp_protocol", "_otel_exporter_otlp_timeout", b"_otel_exporter_otlp_timeout", "_otel_exporter_otlp_traces_endpoint", b"_otel_exporter_otlp_traces_endpoint", "_otel_exporter_otlp_traces_protocol", b"_otel_exporter_otlp_traces_protocol", "_otel_exporter_otlp_traces_timeout", b"_otel_exporter_otlp_traces_timeout", "_otel_log_level", b"_otel_log_level", "_otel_traces_exporter", b"_otel_traces_exporter", "_otel_traces_sampler_arg", b"_otel_traces_sampler_arg", "_pass_identity_headers", b"_pass_identity_headers", "_primary_color", b"_primary_color", "_proxy_log_level", b"_proxy_log_level", "_secondary_color", b"_secondary_color", "_services", b"_services", "_shared_secret", b"_shared_secret", "_skip_xff_append", b"_skip_xff_append", "_ssh_address", b"_ssh_address", "_ssh_host_key_files", b"_ssh_host_key_files", "_ssh_host_keys", b"_ssh_host_keys", "_ssh_user_ca_key", b"_ssh_user_ca_key", "_ssh_user_ca_key_file", b"_ssh_user_ca_key_file", "_timeout_idle", b"_timeout_idle", "_timeout_read", b"_timeout_read", "_timeout_write", b"_timeout_write", "access_log_fields", b"access_log_fields", "address", b"address", "authenticate_service_url", b"authenticate_service_url", "authorize_log_fields", b"authorize_log_fields", "authorize_service_url", b"authorize_service_url", "autocert", b"autocert", "autocert_dir", b"autocert_dir", "autocert_must_staple", b"autocert_must_staple", "autocert_use_staging", b"autocert_use_staging", "bearer_token_format", b"bearer_token_format", "cache_service_url", b"cache_service_url", "certificate_authority", b"certificate_authority", "certificate_authority_file", b"certificate_authority_file", "certificate_authority_key_pair_id", b"certificate_authority_key_pair_id", "certificates", b"certificates", "circuit_breaker_thresholds", b"circuit_breaker_thresholds", "client_ca", b"client_ca", "client_ca_file", b"client_ca_file", "client_ca_key_pair_id", b"client_ca_key_pair_id", "cluster_id", b"cluster_id", "codec_type", b"codec_type", "cookie_domain", b"cookie_domain", "cookie_expire", b"cookie_expire", "cookie_http_only", b"cookie_http_only", "cookie_name", b"cookie_name", "cookie_same_site", b"cookie_same_site", "cookie_secret", b"cookie_secret", "cookie_secure", b"cookie_secure", "darkmode_primary_color", b"darkmode_primary_color", "darkmode_secondary_color", b"darkmode_secondary_color", "databroker_service_url", b"databroker_service_url", "default_upstream_timeout", b"default_upstream_timeout", "dns_failure_refresh_rate", b"dns_failure_refresh_rate", "dns_lookup_family", b"dns_lookup_family", "dns_query_timeout", b"dns_query_timeout", "dns_query_tries", b"dns_query_tries", "dns_refresh_rate", b"dns_refresh_rate", "dns_udp_max_queries", b"dns_udp_max_queries", "dns_use_tcp", b"dns_use_tcp", "error_message_first_paragraph", b"error_message_first_paragraph", "favicon_url", b"favicon_url", "google_cloud_serverless_authentication_service_account", b"google_cloud_serverless_authentication_service_account", "grpc_address", b"grpc_address", "grpc_insecure", b"grpc_insecure", "http_redirect_addr", b"http_redirect_addr", "id", b"id", "identity_provider", b"identity_provider", "identity_provider_options", b"identity_provider_options", "identity_provider_refresh_interval", b"identity_provider_refresh_interval", "identity_provider_refresh_timeout", b"identity_provider_refresh_timeout", "idp_access_token_allowed_audiences", b"idp_access_token_allowed_audiences", "idp_client_id", b"idp_client_id", "idp_client_secret", b"idp_client_secret", "idp_provider", b"idp_provider", "idp_provider_url", b"idp_provider_url", "idp_refresh_directory_interval", b"idp_refresh_directory_interval", "idp_refresh_directory_timeout", b"idp_refresh_directory_timeout", "idp_service_account", b"idp_service_account", "insecure_server", b"insecure_server", "installation_id", b"installation_id", "jwt_claims_headers", b"jwt_claims_headers", "jwt_groups_filter", b"jwt_groups_filter", "jwt_issuer_format", b"jwt_issuer_format", "log_level", b"log_level", "logo_url", b"logo_url", "mcp_allowed_client_id_domains", b"mcp_allowed_client_id_domains", "metrics_address", b"metrics_address", "modified_at", b"modified_at", "originator_id", b"originator_id", "otel_attribute_value_length_limit", b"otel_attribute_value_length_limit", "otel_bsp_max_export_batch_size", b"otel_bsp_max_export_batch_size", "otel_bsp_schedule_delay", b"otel_bsp_schedule_delay", "otel_exporter_otlp_endpoint", b"otel_exporter_otlp_endpoint", "otel_exporter_otlp_headers", b"otel_exporter_otlp_headers", "otel_exporter_otlp_protocol", b"otel_exporter_otlp_protocol", "otel_exporter_otlp_timeout", b"otel_exporter_otlp_timeout", "otel_exporter_otlp_traces_endpoint", b"otel_exporter_otlp_traces_endpoint", "otel_exporter_otlp_traces_headers", b"otel_exporter_otlp_traces_headers", "otel_exporter_otlp_traces_protocol", b"otel_exporter_otlp_traces_protocol", "otel_exporter_otlp_traces_timeout", b"otel_exporter_otlp_traces_timeout", "otel_log_level", b"otel_log_level", "otel_resource_attributes", b"otel_resource_attributes", "otel_traces_exporter", b"otel_traces_exporter", "otel_traces_sampler_arg", b"otel_traces_sampler_arg", "pass_identity_headers", b"pass_identity_headers", "primary_color", b"primary_color", "proxy_log_level", b"proxy_log_level", "request_params", b"request_params", "scopes", b"scopes", "secondary_color", b"secondary_color", "services", b"services", "set_response_headers", b"set_response_headers", "shared_secret", b"shared_secret", "skip_xff_append", b"skip_xff_append", "ssh_address", b"ssh_address", "ssh_host_key_files", b"ssh_host_key_files", "ssh_host_keys", b"ssh_host_keys", "ssh_user_ca_key", b"ssh_user_ca_key", "ssh_user_ca_key_file", b"ssh_user_ca_key_file", "timeout_idle", b"timeout_idle", "timeout_read", b"timeout_read", "timeout_write", b"timeout_write"]) -> None: ...
     @typing.overload
     def WhichOneof(self, oneof_group: typing.Literal["_access_log_fields", b"_access_log_fields"]) -> typing.Literal["access_log_fields"] | None: ...
     @typing.overload
@@ -617,6 +621,8 @@ class Settings(google.protobuf.message.Message):
     @typing.overload
     def WhichOneof(self, oneof_group: typing.Literal["_logo_url", b"_logo_url"]) -> typing.Literal["logo_url"] | None: ...
     @typing.overload
+    def WhichOneof(self, oneof_group: typing.Literal["_mcp_allowed_client_id_domains", b"_mcp_allowed_client_id_domains"]) -> typing.Literal["mcp_allowed_client_id_domains"] | None: ...
+    @typing.overload
     def WhichOneof(self, oneof_group: typing.Literal["_metrics_address", b"_metrics_address"]) -> typing.Literal["metrics_address"] | None: ...
     @typing.overload
     def WhichOneof(self, oneof_group: typing.Literal["_otel_attribute_value_length_limit", b"_otel_attribute_value_length_limit"]) -> typing.Literal["otel_attribute_value_length_limit"] | None: ...