MCP Allowlist doesn't work, also can't be edited

Support Bug Reports
26

I’ve tried the above scripts to no avail. I’ve removed my Windows Cursor and reinstalled. I’m still experiencing the same: Cursor does not respect “Allowlist MCP Tool” and instead asks again and again for permission to Run.

Version: 2.4.21 (user setup)
VSCode Version: 1.105.1
Commit: dc8361355d709f306d5159635a677a571b277bc0
Date: 2026-01-22T16:57:59.675Z
Build Type: Stable
Release Track: Default
Electron: 39.2.7
Chromium: 142.0.7444.235
Node.js: 22.21.1
V8: 14.2.231.21-electron.0
OS: Windows_NT x64 10.0.26100

1 Like
27

Are you even serious Cursor? This issue is indeed a reason to drop your product in favor of competitors… Are you going to win the competition or not??

1 Like
28

I’ve removed my Windows Cursor and reinstalled.

Reinstalling won’t help. You need to remove Cursor data too.

I am not sure where Cursor stores it’s data/configuration on Windows. Probably somewhere in your user profile directory ( Configuration | Cursor Docs ). Maybe $env:USERPROFILE\AppData\Roaming\Cursor.

Note: Removing Cursor data/configuration will also reset all your custom Cursor settings so you would need to set up everything again. That’s why the script in MCP Allowlist doesn't work, also can't be edited - #19 by helloworld2 is a preferred way to fix this issue.

29

Thank you, Miroslav, for your reply. I actually did completely remove my USER\AppData\Roaming\Cursor folder after removing Cursor. After that I installed again. Unfortunately, that did not fix the issue.

1 Like
30

This issue is still happening. @deanrie any updates?

31

Happening for me as well on Mac OS latest. So this is what a $29B valuation gets you.. a VSCode fork with a busted allowlist

1 Like
32

Well, on Fedora Linux, there are two directories:

  • $HOME/.cursor (contains argv.json, extensions/, ide_state.json, projects/, worktrees/, etc.)
  • $HOME/.config/Cursor/ (contains Cache/, CachedProfilesData/, logs/, User/, Workspaces/, etc.)

I deleted both of them and then it started to work.

1 Like
33

still happening ….

34

So annoying - trying to use this in cli.json

35

Thanks, worked great for me on Arch! :+1:

36

chiming in to say this has not been resolved and is still happening to me on the latest version.
Version: 2.4.36 (Universal)
VSCode Version: 1.105.1
Commit: f9919bf991f247689f9ead605b5c5a3239a2a790
Date: 2026-02-12T21:00:33.976Z
Build Type: Stable
Release Track: Default
Electron: 39.2.7
Chromium: 142.0.7444.235
Node.js: 22.21.1
V8: 14.2.231.21-electron.0
OS: Darwin arm64 25.2.0

41

Agreed, I am having the same issue. I am often prompted for the same tool call multiple times in the same agent workflow, and choosing ‘Allowlist’ vs. just ‘Allow’ seems to function identically.

42

This Cursor IDE bug is resolved as of February 17th, 2026. Latest Cursor release correctly adheres to the allowlist :raising_hands:

1 Like