MCP Tool is called even if "skip" is clicked in confirmation dialog

Support Bug Reports
, ,
1

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

MCP tool is executed in “Ask every time” mode even after clicking “Skip”, depending on mcp tool whitelist

Steps to Reproduce

Phase 1: Initial Auto-Run setup

  1. Open Cursor Settings
  2. Navigate to Agents
  3. Set Auto-Run Mode to Auto-Run in Sandbox
  4. Add an MCP tool to the MCP Allow List (whitelist)
  5. Trigger a scenario that executes this MCP tool

Observation:

  • The MCP tool is executed without user confirmation
  • This behavior matches expectations for Auto-Run mode

Phase 2: Switch to “Ask every time”

  1. Change Auto-Run Mode to Ask every time
  2. Trigger the same MCP tool again
  3. In the confirmation dialog, click Skip

Observed behavior (actual result):

  • The MCP tool is still executed despite clicking “Skip”
  • Tool output appears in the UI
  • Logs confirm that the MCP tool was executed

Phase 3: Remove tool from Allow List

  1. Open Cursor Settings again
  2. Remove the MCP tool from the MCP Allow List
  3. Ensure Auto-Run Mode is still set to Ask every time
  4. Trigger the MCP tool again
  5. Click Skip in the confirmation dialog

Observation:

  • The MCP tool is not executed
  • The Skip action is respected correctly

Expected Behavior

  • In “Ask every time” mode, an MCP tool must never execute when the user explicitly clicks “Skip”
  • Execution behavior must not depend on previous Auto-Run modes or Allow List state

Operating System

MacOS

Version Information

Version: 2.4.27
VSCode Version: 1.105.1
Commit: 4f2b772756b8f609e1354b3063de282ccbe7a690
Date: 2026-01-31T21:24:58.143Z
Build Type: Stable
Release Track: Default
Electron: 39.2.7
Chromium: 142.0.7444.235
Node.js: 22.21.1
V8: 14.2.231.21-electron.0
OS: Darwin arm64 25.2.0

Does this stop you from using Cursor

No - Cursor works, but with this issue

1 Like
3

I would not only be okay with the MCP allow list being active in “Ask every time” mode — I would actually strongly welcome it.
Being able to explicitly pre-approve individual MCP tools while staying in “Ask every time” mode is, in my view, highly desirable.

In fact, this could even be considered a feature request on its own.
However, the current behavior makes it look as if this is already the intended design — just implemented inconsistently.

The contradiction arises here:

  • The allow list appears to grant persistent permission to certain MCP tools, even in “Ask every time” mode
  • At the same time, the Skip action is still presented to the user
  • Clicking Skip, however, does not reliably prevent execution

This results in an unclear mental model for users. If allow-listed tools are meant to bypass confirmation, then Skip should not be shown.
If Skip is shown, it must always be authoritative and cancel execution.

1 Like
4

Hey, thanks for the detailed report - the 3-phase reproduction really helps.

This is a known issue. Right now, the Allow List overrides “Ask every time” mode - tools from the whitelist run even if you click Skip. The team knows about it.

Workaround for now: remove the tool from the Allow List when you need full control via Skip/Accept.

About your comment in Post #3 - that’s valid feedback. It’s unclear right now: if Allow List gives implicit permission, the Skip button shouldn’t show. If Skip shows, it should work. The current behavior confuses users. I’ll pass it to the team along with this report.

Let me know if the workaround doesn’t fit your case.

5

One follow-up question though:
Is it planned (or at least being considered) to support a whitelist / allow list that is still respected when running in “Ask Every Time” mode?

From a user perspective, this would be extremely helpful: being able to explicitly trust certain MCP servers or tools while still keeping the general safety net of manual confirmation for everything else. The current behavior almost feels like this might already be the intended direction, which is why I wanted to ask.

Thanks again for the clarification and for taking the time to look into this.

1 Like