Control MCP tool use
Dedicated hooks for MCP server tool invocations — audit, restrict, or modify MCP tool calls independently from built-in tools
Baseline Widely available Fully supported by every tracked agent since Apr 2026, when Codex added it. Based on web.dev's Baseline
Tool-Specific Hooks Hooks & Lifecycle
Supported
Partial
No
Unknown
Not released
1.0.38 - 2.1.311
0.124.0 - 0.164.0
0.0.396 - 1.0.103
2.4 - 3.27
0.3.114 - 1.19.4
0.2.31 - 1.0.37
0.2.0 - 0.123.0
0.0.374 - 0.0.395
1.7 - 2.0
0.1.30 - 0.3.102
—
—
—
0.45 - 1.3
—
Supported by all 5 agents.
HoverTap any cell for version details.
Agent event mapping
Sub-capabilities
- Block or audit specific MCP tool calls
- Cursor: dedicated MCP events separate from generic tool hooks
- Claude Code: uses PreToolUse with regex matcher on mcp__<server>__<tool>; also has Elicitation hooks
- Codex: MCP tool observation added in 0.124.0