require_approval for a Responses MCP server tool

What it does

Decides what ganja does when a configured Responses mcp server tool asks for approval before a call: refuse the setting at load, answer it from the session's permission engine, or always send never.

Source

ganja-code-e9qp (what require_approval does for a Responses MCP server tool; an open question).

The bead is closed when this issue is published, with its external reference pointing here (#38).

File and line references in this issue are to main as of 75a7a92.

Against the three criteria

• Direction (README): The README says nothing about provider wires.
• Today's terminal users: Nothing handles an approval request today, so on the openai id a value other than never would stall silently. The ChatGPT seat refuses the mcp type, and the configuration refuses it at load for the chatgpt id (crates/ganja-core/src/config.rs:3612-3619).
• Evidence: Measured after the bead was filed: on the platform (openai) an mcp entry with require_approval: "never" is accepted. What the platform does with another value is unmeasured.

Depends on

Nothing.

Verdict

• Verdict: do
• Size: M — which of the three answers is taken is left to the plan, after measuring.
• Exception to the probe rule: no.
• Date: 2026-09-19
• Verdict ticket: #44

Theme: #57

Start with the README's provider documentation and crates/ganja-core/src/config.rs:3612-3619, then measure how the openai Responses MCP server handles require_approval values other than "never". Choose and document one of the three approval behaviors, implement it for terminal users, and verify that configuration loading and approval requests no longer stall silently.