A new checkbox on the setup page controls whether to require approval of MCP tool calls:
If approval is enabled, we handle MCP tool call requests by rendering a user approve/deny widget:
A new route handles submitting the approval/denial and resuming the conversation.