diff --git a/frontend/src/api.ts b/frontend/src/api.ts
index 3271c79b..46f6f9c5 100644
--- a/frontend/src/api.ts
+++ b/frontend/src/api.ts
@@ -391,8 +391,34 @@ export function getPluginSchema(id: string) {
   return request<PluginSchemaResponse>(`/plugin/${id}/schema`)
 }
 
+export interface ServerLimits {
+  network: {
+    bind_address: string
+    port: number
+    allow_remote: boolean
+  }
+  sandbox: {
+    engine: string
+    default_timeout: number
+    resource_limits: {
+      cpu_quota: number
+      memory_mb: number
+    }
+  }
+  safety: {
+    require_consent: boolean
+    safe_mode_default: boolean
+    allowed_networks: string[]
+  }
+  execution_context: {
+    validation_modes: string[]
+    evidence_levels: string[]
+    default: ExecutionContext
+  }
+}
+
 export function getSettings() {
-  return request<any>(`/settings`)
+  return request<ServerLimits>(`/settings`)
 }
 
 export function getDashboardSummary() {
diff --git a/frontend/src/pages/ToolConfig.tsx b/frontend/src/pages/ToolConfig.tsx
index 11c8dfb4..d2c8cf63 100644
--- a/frontend/src/pages/ToolConfig.tsx
+++ b/frontend/src/pages/ToolConfig.tsx
@@ -9,6 +9,7 @@ import {
   listCredentialProfiles,
   listSessionProfiles,
   ExecutionContext,
+  ServerLimits,
   TargetPolicy,
   CredentialProfile,
   SessionProfile,
@@ -70,7 +71,7 @@ export default function ToolConfig() {
   const [consentGranted, setConsentGranted] = useState(false)
   const [loading, setLoading] = useState(true)
   const [submitting, setSubmitting] = useState(false)
-  const [serverLimits, setServerLimits] = useState<any | null>(null)
+  const [serverLimits, setServerLimits] = useState<ServerLimits | null>(null)
   const [targetPolicies, setTargetPolicies] = useState<TargetPolicy[]>([])
   const [credentialProfiles, setCredentialProfiles] = useState<CredentialProfile[]>([])
   const [sessionProfiles, setSessionProfiles] = useState<SessionProfile[]>([])