MCP Approval Gate
Your AI agent wants to run a command. You get to say yes or no first.
Questions this answers
- How do I control which MCP actions AI can execute in my terminal?
- Can I approve MCP tool calls before they run?
- Is there a way to gate AI tool execution in a terminal emulator?
- How to prevent unauthorized MCP commands from running?
How it works
When an AI agent connected via MCP requests a tool action: executing a command, writing a file, or modifying terminal state: Chau7 can intercept the request and present it for your approval. The approval dialog shows the tool name, all parameters, and the originating agent, letting you accept, reject, or modify the request before it reaches the shell.
Approval rules are configurable per-tool and per-agent. You can auto-approve safe read-only operations like listing files, require approval for write operations, and permanently block specific tools. Rules persist across sessions, so you build up a trust profile over time without repeated prompts for tools you have already vetted.
Why it matters
MCP gives AI agents powerful capabilities inside your terminal, but power without oversight is a liability. The approval gate lets you review every MCP tool call before it executes. Enable it globally, per-tool, or not at all. It is the difference between 'my AI can do anything' and 'my AI can do anything I approve.'
Frequently asked questions
Does the approval gate slow down AI workflows?
Only for the actions you choose to gate. Read-only operations and pre-approved tools execute instantly. The gate only pauses execution for tools that match your approval rules, so trusted workflows run at full speed.
Can I approve tools once and remember the decision?
Yes. When approving a tool call, you can choose to remember the decision for that tool, that tool from a specific agent, or that exact tool-and-parameter combination. Remembered approvals persist across sessions.
Does this work with all MCP-connected agents?
Yes. The approval gate operates at the MCP protocol layer inside Chau7, so it works with any agent that connects through MCP: Claude, custom agents, or any future MCP-compatible assistant.