If an MCP approval prompt never appears, first check which runtime is making the call. In the Responses API, the configured require_approval policy may allow the call automatically, be set to never, or apply only to tools that do not match its approval filter. Responses API and Agents SDK applications also do not automatically inherit Codex Auto-review; add human review in the application when it is needed. Codex plugin settings are another possible control surface, but the available documentation does not establish their precedence over other Codex CLI or IDE settings.
Start by identifying the runtime
“MCP approval gate” can refer to controls in different systems. Do not assume a setting for one runtime controls another.
As an Amazon Associate I earn from qualifying purchases.
- Responses API or Agents SDK application: inspect the MCP tool configuration sent by the application, then check where its own review and enforcement happen.
- Codex plugin MCP server: inspect the plugin’s server-level and per-tool approval fields.
- Codex CLI or IDE MCP configuration: identify the exact product, version, and configuration scope before diagnosing a missing prompt. The sources cited here do not establish setting precedence for an individual CLI or IDE setup.
OpenAI’s Responses API MCP guide describes API tool-call approval. Its rules should not be treated as proof of how a Codex CLI or IDE approval gate is configured.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallWhy a Responses API approval request may not appear
The Responses API MCP tool’s require_approval field determines whether calls require approval. OpenAI documents that calls can be allowed automatically or restricted to require explicit developer approval. The field can be set to always, never, or an approval filter.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
| Configuration | What it means | What to check |
|---|---|---|
require_approval: "always" |
Calls covered by this policy require approval. | Confirm this is the effective value in the MCP tool configuration used for the request. |
require_approval: "never" |
Approval is skipped for all tools on that remote MCP server. | Check whether the application configured never when it intended to require review. |
| An approval filter | Approval depends on whether a tool matches the configured criteria. | Compare the actual tool name or read-only status with the filter’s criteria. |
The Responses API reference documents filters based on tool names or read_only. A read_only criterion matches an MCP server tool annotated with readOnlyHint. If the called tool’s name or annotation does not meet the configured criterion, that filter may not request approval for it. Verify the tool metadata and the exact filter rather than inferring behavior from the tool’s apparent purpose.
Trace the call and match it against the policy
- Inspect the request configuration. Find the MCP tool definition actually sent to the Responses API and read its
require_approvalvalue. Do not rely only on a local default or a setting from another runtime. - Check the policy’s scope. If it is
never, the API guide says approval is skipped for every tool on that remote MCP server. If it isalways, confirm that the relevant call is covered by that policy. - Evaluate each filter criterion. For a tool-name filter, compare the exact called tool name. For
read_only, check whether the MCP server marks the tool withreadOnlyHint. - Confirm whether the call actually reached the approval path. The API guide documents an approval-request item when a call requires approval. Inspect the returned response and your application’s handling of that item; a configured requirement only helps if the application responds appropriately to the approval request.
OpenAI’s MCP guide also documents ways to skip approval for all tools or selected tools. Review those settings alongside the policy, especially if the application’s configuration has changed over time.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Keep application-level human review separate from Codex Auto-review
For applications built with the Responses API or Agents SDK, Codex Auto-review is not an automatic safety net. OpenAI’s human review guidance states: “Responses API and Agents SDK applications don’t automatically inherit Codex Auto-review.” If a workflow needs a person to approve consequential actions, implement that review in the application’s harness and enforce it where the side effect would occur.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsThis is a separate boundary from an API MCP approval request. The API policy controls whether a tool call requires approval in that MCP flow; application-level review is logic the application must provide. Make sure the harness pauses before a consequential action, obtains the required decision, and prevents the action from proceeding without it.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Check plugin-scoped approval settings carefully
Plugin-scoped MCP configuration exposes a server default, default_tools_approval_mode, and a per-tool approval_mode. The Codex plugin documentation identifies these as configuration fields, but does not establish how they interact with other Codex settings in every environment.
Inspect both the server default and the specific tool entry. Then verify precedence against the documentation for the exact Codex version and configuration in use. The existence of similarly named approval controls across products does not establish that they share the same precedence rules.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
When the missing prompt is in Codex CLI or an IDE
A definitive setting-level diagnosis needs more than the symptom. Record the Codex runtime and version, where the MCP server is configured, and which user, project, managed, or plugin configuration applies. Then consult documentation for that exact setup. The API’s require_approval field is not evidence that a CLI or IDE uses the same setting or resolution order.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
