Skip to content

fix: #3168 validate MCP require_approval policies - #3179

Merged
seratch merged 1 commit into
mainfrom
fix/mcp-require-approval-validation
May 7, 2026
Merged

seratch merged 1 commit into
mainfrom
fix/mcp-require-approval-validation

Conversation

@seratch

@seratch seratch commented May 7, 2026

Copy link
Copy Markdown
Member

This pull request fixes #3168 MCP require_approval normalization so invalid approval policies cannot silently disable human-in-the-loop approval.

It validates top-level policy strings, per-tool mapping values, and TS-style always.tool_names / never.tool_names objects, raising UserError for invalid values or conflicting tool names instead of normalizing them to approval-free behavior.

@seratch seratch added this to the 0.16.x milestone May 7, 2026
@github-actions github-actions Bot added bug Something isn't working feature:mcp labels May 7, 2026
@seratch

seratch commented May 7, 2026

Copy link
Copy Markdown
Member Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Delightful!

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@seratch
seratch merged commit 28de365 into main May 7, 2026
10 checks passed
@seratch
seratch deleted the fix/mcp-require-approval-validation branch May 7, 2026 09:26
RudrenduPaul pushed a commit to RudrenduPaul/openai-agents-python that referenced this pull request Jun 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working feature:mcp

Projects

None yet

Development

Successfully merging this pull request may close these issues.

MCP require_approval invalid values can fail open

1 participant