The MCP tools allow list now exists in recent Cursor versions, but it broke in a horrible way for users who had manually enabled stuff like “MCP Tools Protection”, which is no longer exposed in the UI.
For those affected, there is a fix which I just posted here:
https://forum.cursor.com/t/mcp-allowlist-doesnt-work-also-cant-be-edited/135594/14