Require Human Approval for MCP Tool Calls
Human approval is appropriate for actions such as deleting data, sending money, publishing content, deploying production, or contacting customers.
Local MCP
MCPServerStdio and MCPServerStreamableHttp support require_approval. Policies can apply to all tools or selected names.
Hosted MCP
HostedMCPTool supports require_approval in its tool configuration and can use an approval callback.
Pause and resume
The Agents SDK represents pending approvals as interruptions. A run can be converted into durable state, approved or rejected, and then resumed.
Approval is not a substitute for authorization. A human can approve only actions the caller is permitted to perform.