Just now, using claude-3.7-thinking in agent mode, it made a bunch of MCP tool calls during the thinking step without prompting for approval (YOLO mode is off).
Request ID: 36308eec-50f5-4630-af56-9426f7a2e26b
Thankfully none of my tools can make destructive actions, but this seems like a very concerning bug.