Pattern: MCP Permission UX Is Shifting From Per-Tool Prompts to Server-Scoped Grants

Releasebot·medium signal

Windsurf's new 'approve all tools on this server for the session / permanently' options mark a move away from per-tool approval fatigue toward server-scoped trust — while Amazon Q's auto-load-everything failure is the cautionary opposite end of the same axis. The design tension to watch: coarse server-level grants reduce prompt fatigue but widen blast radius, so the durable pattern is server-scoped grants paired with least-privilege server configs, not one without the other.