Allowlist not allowlisting

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

The LLM’s keep asking for permission to use the same MCP, but when I click allowlist to add, while authorizing that one command, it doesnt

Steps to Reproduce

LLM asks to use MCP tool, click allow.

MCP asks again, still asks for allow to be clicked.

Operating System

MacOS

Version Information

Version: 2.4.35
VSCode Version: 1.105.1
Commit: d2bf8ec12017b1049f304ad3a5c8867b117ed830
Date: 2026-02-10T02:46:56.793Z
Build Type: Stable
Release Track: Early Access
Electron: 39.2.7
Chromium: 142.0.7444.235
Node.js: 22.21.1
V8: 14.2.231.21-electron.0
OS: Darwin arm64 24.6.0

Does this stop you from using Cursor

No - Cursor works, but with this issue

Hey! This is a known issue with the MCP allowlist. The team is aware and already tracking it. A few users have reported the same behavior where clicking “Allowlist” doesn’t save the permission.

A couple things that would help narrow it down:

  1. Which MCP server does this happen with?
  2. In Settings > Agents > Auto-Run Mode, which option is currently selected?

For now, you can try a workaround. Go to Settings > Agents > Auto-Run Mode and switch to Auto-Run in Sandbox. This fully bypasses the allowlist prompt for MCP tools and runs them in an isolated environment.

Also, some users noticed the allowlist syntax can change between sessions, like project-0-servername:tool vs servername:tool, which can make previously saved entries stop working. If you’re seeing that pattern, try manually adding a wildcard pattern like *servername:* to your allowlist.

Let me know if switching the auto-run mode helps, or if you need more help.

This topic was automatically closed 22 days after the last reply. New replies are no longer allowed.