Per-chat session approval for MCP tools

Ideas Feature Requests
,
1

Feature request for product/service

Cursor IDE

Describe the request

Currently, MCP tool approval offers two options:

“Run” — asks for approval on every single invocation, even within the same chat
“Allowlist MCP Tool” — permanently auto-approves, never asks again in any chat
I’d like a third option: “Allow for this chat” that:

Asks for approval the first time an MCP tool is invoked in a new chat
Auto-approves all subsequent invocations of that tool within the same chat session
Resets when a new chat is opened, requiring approval again
This balances convenience (not clicking “Run” dozens of times in a single chat) with security (reviewing and authorizing MCP tool access at the start of each new session). This is especially important for MCP tools that connect to databases or external services, where you want awareness of what’s being accessed but don’t want the friction of approving every single query.

6

Hi @Dhaval_Shewale, thanks for the feature request! You’re correct that currently the only two options for approval are approving a single run or permanently auto-approving. This is good feedback. There was a similar request here: Add an "Allow for this chat/session" to command permissions

We’ll keep this in mind and appreciate the suggestion.