Cursor Windows App - Computer Use Permissions Overridden

Where does the bug appear (feature/product)?

Somewhere else…

Describe the Bug

Cursor Windows App:
Cursor clicked and typed in Chrome without asking, even though Computer Use had no always-allowed apps.

Model: Grok 4.7 Medium

What the setting shows

  • Cursor Settings → Agents → Computer Use says: “No always-allowed apps yet. Choose Always Allow when Cursor asks to use an app.”
  • That means Cursor should ask before it controls an app. Nothing was set to Always Allow.
    What happened

In this chat, the agent opened Chrome DevTools and clicked and typed to add custom screen sizes.

  • No approval prompt appeared.
  • The always-allowed list was still empty afterward. Nothing on that screen had been turned on.

Steps to Reproduce

Not really sure, but in my case it just happened as I typed a message to ask Cursor to do something. Grok 4.7 medium was selected.

Expected Behavior

There has to be a specific way to turn computer use by navigate and click on or off. I dont see any off switch in the settings. also Cursor should ask before it clicks or types in an app, unless that app is on the always-allowed list.

Screenshots / Screen Recordings

Operating System

Windows 10/11

Version Information

Cursor 3.27.12 (stable), released 23 October 2026.

For AI issues: which model did you use?

Grok 4.7 Medium

For AI issues: add Request ID with privacy disabled

privacy was on when the request ran

Does this stop you from using Cursor

No - Cursor works, but with this issue

Hey, thanks for the detailed report and screenshots.

We looked into your request. In Chrome, the clicking and typing was done by the Computer Use tool in Cursor. The always-allowed apps list was not being ignored. On Windows, there just isn’t a separate prompt for each app right now. Each Computer Use action is approved the same way as any other MCP tool call, based on your run mode. That’s why the list stayed empty.

It looks like you have Auto-review turned on. In that mode, MCP calls, including Computer Use, are checked by a classifier, and anything it allows runs without a prompt. More here: Run Modes | Cursor Docs

I agree the text in Settings > Agents > Computer Use on Windows is confusing. It says there will be a prompt, but there isn’t one there right now. I’ve passed that on to the team.

To get a prompt before every action:

  1. Open Settings > Agents > Approvals & Execution.
  2. Switch the run mode to Ask Every Time.

There isn’t a separate Computer Use toggle in Agents settings yet. Another thing that should help is this: in the MCP servers list, Computer Use should appear as its own entry, “Computer Use”, Control apps on your computer. If you disable that server, the agent won’t be able to use it. I’ve also passed along the request for a separate toggle.

If you don’t see that entry in the MCP list, write back and we’ll dig into it further.

Thanks a lot Dean,

That was very helpful,

However, please see it from the users perspective, this is a problem which didnt exist before …

MCP Server for Computer control is new and it was added and switched on by default - so you can understand my surprise.