Add `mcp_servers.<id>.default_tools_approval_mode`

What variant of Codex are you using?

CLI

What feature would you like to see?

There is a config setting apps.<id>.default_tools_approval_mode for the experimental ChatGPT Apps/connectors support that sets "Default approval behavior for tools in this app unless a per-tool override exists."

MCP servers have no equivalent mode. It would be helpful to have a default approval mode for MCP servers, especially for read-heavy servers like Context7 or the OpenAI Developer docs MCP.

The goal would be to change this:

[mcp_servers.openai_developer_docs]
url = "https://developers.openai.com/mcp"

[mcp_servers.openai_developer_docs.tools.fetch_openai_doc]
approval_mode = "approve"

[mcp_servers.openai_developer_docs.tools.list_openai_docs]
approval_mode = "approve"

[mcp_servers.openai_developer_docs.tools.search_openai_docs]
approval_mode = "approve"

Into this:

[mcp_servers.openai_developer_docs]
url = "https://developers.openai.com/mcp"
default_tools_approval_mode = "approve"

Additional information

_No response_