Cursor Windows App:
Cursor clicked and typed in Chrome without asking, even though Computer Use had no always-allowed apps.
Model: Grok 4.7 Medium
What the setting shows
Cursor Settings → Agents → Computer Use says: “No always-allowed apps yet. Choose Always Allow when Cursor asks to use an app.”
That means Cursor should ask before it controls an app. Nothing was set to Always Allow.
What happened
In this chat, the agent opened Chrome DevTools and clicked and typed to add custom screen sizes.
No approval prompt appeared.
The always-allowed list was still empty afterward. Nothing on that screen had been turned on.
Steps to Reproduce
Not really sure, but in my case it just happened as I typed a message to ask Cursor to do something. Grok 4.7 medium was selected.
Expected Behavior
There has to be a specific way to turn computer use by navigate and click on or off. I dont see any off switch in the settings. also Cursor should ask before it clicks or types in an app, unless that app is on the always-allowed list.
Hey, thanks for the detailed report and screenshots.
We looked into your request. In Chrome, the clicking and typing was done by the Computer Use tool in Cursor. The always-allowed apps list was not being ignored. On Windows, there just isn’t a separate prompt for each app right now. Each Computer Use action is approved the same way as any other MCP tool call, based on your run mode. That’s why the list stayed empty.
It looks like you have Auto-review turned on. In that mode, MCP calls, including Computer Use, are checked by a classifier, and anything it allows runs without a prompt. More here: Run Modes | Cursor Docs
I agree the text in Settings > Agents > Computer Use on Windows is confusing. It says there will be a prompt, but there isn’t one there right now. I’ve passed that on to the team.
To get a prompt before every action:
Open Settings > Agents > Approvals & Execution.
Switch the run mode to Ask Every Time.
There isn’t a separate Computer Use toggle in Agents settings yet. Another thing that should help is this: in the MCP servers list, Computer Use should appear as its own entry, “Computer Use”, Control apps on your computer. If you disable that server, the agent won’t be able to use it. I’ve also passed along the request for a separate toggle.
If you don’t see that entry in the MCP list, write back and we’ll dig into it further.