Describe the Bug
The Cursor “Auto” Agent just executes tools without my permission. I have not changed any settings in regards to this and it used to work as expected in the past.
In my case it was a supabase MCP integration. Fortunately on a test Project where not too much damage could be done
Steps to Reproduce
- Ask the Agent to perform a task that requires a tool call you want authorized.
- The Agent starts, on tool calling the confirmation dialog appears
- Wait and watch the tool being executed without confirming by click on “Run Tool”
Expected Behavior
The Agent waits until confirmation. Confirming needs time as one might want to inspect the parameters of the tool call.
Screenshots / Screen Recordings
Operating System
MacOS
Current Cursor Version (Menu → About Cursor → Copy)
Version: 1.3.9 (Universal)
VSCode Version: 1.99.3
Commit: 54c27320fab08c9f5dd5873f07fca101f7a3e070
Date: 2025-08-01T20:27:38.378Z (3 days ago)
Electron: 34.5.1
Chromium: 132.0.6834.210
Node.js: 20.19.0
V8: 13.2.152.41-electron.0
OS: Darwin arm64 24.1.0
Additional Information
This makes Cursor unusable for any operation that involves potential write operations into third party systems
Does this stop you from using Cursor
No - Cursor works, but with this issue