I have discussed this issue with the Cursor team. It turns out it isn’t a bug; it is just a missing feature. They have not implemented MCP approvals for the CLI yet, so the only solution is to either keep clicking approve in interactive mode or use --force .
There is no ETA on when this feature will be available.