Control MCP tool use
Dedicated hooks for MCP server tool invocations — audit, restrict, or modify MCP tool calls independently from built-in tools
Tool-Specific Hooks Hooks & Lifecycle
Supported
Partial
No
Unknown
2.1.118 - 2.1.143
3.82.0 - 3.83.0
0.124.0 - 0.128.0
2026.03 - 2026.05
3.2
2.0.44 - 2.1.29
2.1.10 - 2.1.118
3.82.0
0.88.0 - 0.122.0
2025.10 - 2026.03
2.4 - 3.2
1.13.3 - 2.0.44
2.0.51 - 2.1.10
3.82.0
0.77.0 - 0.88.0
2025.10
2.0
1.13.3
2.0.0 - 2.0.51
3.82.0
0.36.0 - 0.77.0
2025.07 - 2025.10
1.7 - 2.0
1.2.1 - 1.12.31
1.0.38 - 1.0.85
3.82.0
0.2.0 - 0.36.0
2025.06 - 2025.07
1.0 - 1.2
1.2.1
0.2.31 - 1.0.0
1.5.0 - 3.82.0
—
2025.06
0.45 - 1.0
1.0.2 - 1.2.1
Supported by 4 of 6 agents.
HoverTap any cell for version details.
Agent event mapping
Sub-capabilities
- Block or audit specific MCP tool calls
- Cursor: dedicated MCP events separate from generic tool hooks
- Claude Code: uses PreToolUse with regex matcher on mcp__<server>__<tool>; also has Elicitation hooks
- Codex CLI: MCP tool observation added in 0.124.0