MCP Allowlist not working

[Cargold]

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

Even after adding MCP tool names to the Allowlist, approval requests are required every time.

Steps to Reproduce

1. Google Sheets MCP connection user-google-sheets-mcp
2. Verify MCP JSON user-google-sheets-mcp
3. Add frequently used MCP tool names to the Allowlist ‘user-google-sheets-mcp:…’
4. When requesting access via Google Sheets MCP in the AI chat, the tool name differs from the intended one. user-google-sheets-mcp is missing, causing it to ask whether to run each time.

Expected Behavior

1. The tool name in Google Sheets MCP differs from the intended one
2. Even after clicking ‘Add to Allowlist’, MCP-specific tool names like get_sheet_data are not added

Screenshots / Screen Recordings

Operating System

Windows 10/11

Current Cursor Version (Menu → About Cursor → Copy)

Version: 2.2.14 (user setup)
VSCode Version: 1.105.1
Commit: 1685afce45886aa5579025ac7e077fc3d4369c50
Date: 2025-12-11T01:12:35.790Z
Electron: 37.7.0
Chromium: 138.0.7204.251
Node.js: 22.20.0
V8: 13.8.258.32-electron.0
OS: Windows_NT x64 10.0.19045

For AI issues: which model did you use?

Auto

For AI issues: add Request ID with privacy disabled

e2fc00c0-6eaa-49b1-aea8-cad039ade6f2

Does this stop you from using Cursor

No - Cursor works, but with this issue

[deanrie]

Hey, thanks for the report. I can see the issue in the screenshots - at request time the tool shows as “get_sheet_data” (screenshot 4), while in the allowlist it’s recorded as “user-google-sheets-mcp:get_s…” with the server prefix (screenshot 3). Because of this mismatch, the allowlist doesn’t apply.

This is a known issue and the team is working on it.

[Cargold]

Thank you for your response!
That’s why I tried to modify the MCP allowlist myself.
However, while it was possible in the past, editing is now impossible.
Modifying, adding, removing—all editing is disabled.
Currently, the only tools that can be added are those added via the “Add to Allowlist” button when AI uses MCP.
Why can’t I actively edit it myself?
I’m also curious if this has been reported as a bug.