Whitelist approval executes only explicitly approved pending tool calls. The agent pauses before execution, stores approval-required calls in execution state, and rejects unapproved calls automatically. section 6.3.7
Partial approval
When an agent requests three tool calls, a user can approve two and reject one; only the two approved calls execute. This prevents irreversible actions such as file deletion or payment processing from running before consent. section 6.3.7
