A repository administrator adds this MCP configuration in the repository settings for Copilot cloud agent. The goal is to let Copilot use two read-only Notion tools during assigned issue work. Evaluate the following statements. 1. The configuration uses the correct top-level object for repository MCP configuration. 2. The token will be available if it is saved only as an Agents secret named NOTION_TOKEN. 3. After the configuration is saved, Copilot can use the enabled MCP tools without asking for approval each time.

{
    "mcpServers": {
      "notionApi": {
        "type": "local",
        "command": "docker",
        "args": [
           "run",
           "--rm",
           "-i",
           "-e",
           "OPENAPI_MCP_HEADERS={\"Authorization\":\"Bearer $NOTION_API_KEY\"}",
           "mcp/notion"
        ],
        "env": {
           "NOTION_API_KEY": "$COPILOT_MCP_NOTION_TOKEN"
        },
        "tools": ["search", "readPage"]
      }
    }
}