codex showing chrome mcp confirmation every time
Open 💬 9 comments Opened Mar 30, 2026 by fytriht
💡 Likely answer: A maintainer (github-actions[bot], contributor)
responded on this thread — see the highlighted reply below.
What version of the IDE extension are you using?
26.325.31654
What subscription do you have?
plus
Which IDE are you using?
VS Code
What platform is your computer?
Darwin 25.3.0 arm64 arm
What issue are you seeing?
codex showing chrome mcp confirmation every time for every tool calls
<img width="652" height="438" alt="Image" src="https://github.com/user-attachments/assets/a6e158da-20c4-4f94-b456-0dc1b6469f97" />
<img width="651" height="453" alt="Image" src="https://github.com/user-attachments/assets/1aa4ac9a-1c0b-4609-9600-a649ce02626e" />
<img width="636" height="461" alt="Image" src="https://github.com/user-attachments/assets/b0dcc01c-13e5-4ae6-ad67-84098e1072c5" />
What steps can reproduce the bug?
trigger chrome mcp like: Check the performance of https://developers.chrome.com
What is the expected behavior?
- no confirmations needed
- or can be configured to "always allow"
Additional information
this is a problem that has emerged in the last two days. it was "always allow" before
9 Comments
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
I am also experiencing this with every MCP. Attempted to set approve for each in the config.toml manually, and it has no effect. This change completely gutted the usefulness of all MCPs. Is there any method to fully allow any MCP to run when in workspace-write?
I'm getting the same problem. I gave codex full access, click 'always allow' and made sure config.toml does not require approval for any chrome mcp tools.
Yet, Codex pop up the 'approve' dialog for every single chrome action.
This makes Codex unusable because the whole point of AI is to automate work, but that's not possible if a human has to manually approve every single button click.
If there's something I'm doing wrong I'd appreciate your help.
Thanks
I have the same issue. This way MCP is unusable with codex
same issues
just to confirm, the issue hasn't been yet addressed with 0.120.0
afaict still triggering MCP prompts even when
--danger-skip-permissionsflag is setSame here, completely unusable at the moment. Maybe it'll be fixed with a release this week 👀 Either way, feels pretty urgent — Playwright MCP and other MCPs are broken because of this.
Hello everyone,
The "Always allow" option is working for me now. The only issue was that I hadn’t noticed the checkbox next to "Always allow". Once I checked it and accepted the request, it was never prompted again.
still issues