MCP permissions

[artur-kozminski]

Describe the feature or problem you'd like to solve

add configuration allowence to usage of some tools from mcp servers

Proposed solution

Similar
"trustedFolders": [
".",
"C:\Users\t0155821\repos\ilbs",
"C:\Users\t0155821\.copilot",
"C:\Users\t0155821\.config\agents"
],
in config.json add "trustedTools": [ "mcp_server_name": ["tool_name1", "tool_name2"]]

in CLI tool there should be as well command /allow-tool <tool_name>

Example prompts or workflows

especially that's useful when we always know that some mcp functionality is read-only, and cannot have negative impact, or same with side effect impact is accepted

e.g. our tool reads db, gets data from webpage , why to asks each time,

Additional context

GitHub Copilot CLI 1.0.39

[artur-kozminski]

there is something like permissions-config.json, now I see it ,probably persistently kept between versions , not yet tested but maybe it's what I requested

content
"locations": {
"C:\Users\t0155821": {
"tool_approvals": [
{
"kind": "mcp",
"serverName": "mcp2",
"toolName": "mcp2_operation1"
},

[artur-kozminski]

it's working but STILL PROBLEM is with functionality, is that per session or persistence, file is persistence /reset-allowed-tools removes all entries, and what is expected to control SESSION allows from PERMANENT allows, and /reset-allowed-tools should have parameter session, and file session if is per session setting, closing agent /changing session removes all session's related configuration while permanent stays