v2 web/desktop: MCP permission prompt shows only *, not the tool name #51519

Activity

1. github-actions

   assigned

   Brendonovich

   on Sep 26, 2026
2. github-actions commented on Sep 26, 2026

   

   github-actionsBot

   on Sep 26, 2026 – with GitHub Actions

   Contributor

   More actions

   This issue might be a duplicate of an existing issue. Please check:

   • MCP tools show * instead of actual tool name in permission dialogs #19549: MCP permission dialogs show * instead of the actual tool name.
3. DamienSchreurs commented on Sep 26, 2026

   

   DamienSchreurs

   on Sep 26, 2026

   Last edited by DamienSchreurs

   Author

   More actions

   Same bug as #19549. That one was closed by the stale bot and never fixed; none of the attempts (#19618, #24605, #32564) were merged. This is the v2 version, reproduced on 2.0.18 in the web/desktop dock. Either way is fine with me: track it here or reopen #19549.
4. opencodejr commented on Oct 28, 2026

   

   opencodejrBot

   on Oct 28, 2026

   More actions

   Thanks for the detailed report. I can confirm this on 2.0.18, and it still happens on the latest dev (86ce19d).

   What I did:

   • Set up a small local MCP server demo with one tool, greet, and the rule { "action": "demo_*", "resource": "*", "effect": "ask" }.
   • Had a simulated model call demo_greet.

   What I saw:

   • The pending permission request is action: "demo_greet", resources: ["*"]. On dev, metadata.input is now set too (from fix(mcp): pass tool input as permission metadata #51062).
   • The TUI labels the prompt "Call tool demo_greet".
   • I rendered the web/desktop SessionPermissionDock with that same request. It shows no hint line and only *, and the tool name appears nowhere. I couldn't run the full web or desktop app here, so this check covered the dock component on its own.

   The script below reproduces the server side and prints the request. I've passed this on to the maintainers. Related: #51062 (forwards the tool input as permission metadata, but the dock doesn't show it yet).

   Reproduction script (drive.ts)

   // Repro for #51519: MCP tool permission request carries resources ["*"],
   // which is all the web/desktop permission dock renders.
   import { Effect, Stream } from "effect"
   import { Llm, OpenCodeDriver } from "opencode-drive"
   const server = "// Minimal stdio MCP server exposing one tool: \"greet\"\nimport readline from \"node:readline\"\nconst rl = readline.createInterface({ input: process.stdin })\nconst send = (m) => process.stdout.write(JSON.stringify(m) + \"\\n\")\nrl.on(\"line\", (line) => {\n  let msg; try { msg = JSON.parse(line) } catch { return }\n  if (msg.id === undefined) return\n  if (msg.method === \"initialize\")\n    return send({ jsonrpc: \"2.0\", id: msg.id, result: { protocolVersion: msg.params?.protocolVersion ?? \"2025-06-18\", capabilities: { tools: {} }, serverInfo: { name: \"demo\", version: \"1.0.0\" } } })\n  if (msg.method === \"tools/list\")\n    return send({ jsonrpc: \"2.0\", id: msg.id, result: { tools: [{ name: \"greet\", description: \"Greet someone\", inputSchema: { type: \"object\", properties: { name: { type: \"string\" } } } }] } })\n  if (msg.method === \"tools/call\")\n    return send({ jsonrpc: \"2.0\", id: msg.id, result: { content: [{ type: \"text\", text: \"Hello \" + (msg.params?.arguments?.name ?? \"?\") }] } })\n  send({ jsonrpc: \"2.0\", id: msg.id, result: {} })\n})\n"
   
   export default OpenCodeDriver.use(
     {
       ...(process.env.OC_DEV ? { opencode: { dev: process.env.OC_DEV } } : {}),
       tui: { recording: true },
       project: { git: true, files: { "mcp-server.mjs": server } },
       config: {
         mcp: { servers: { demo: { type: "local", command: ["bun", "mcp-server.mjs"], codemode: false } } },
         permissions: [{ action: "demo_*", resource: "*", effect: "ask" }],
       },
     },
     ({ ui, llm, opencode }) =>
       Effect.gen(function* () {
         yield* Effect.sleep(process.env.OC_DEV ? 15000 : 3000)
         let called = false
         yield* llm.serve((request) => {
           const body = JSON.stringify(request)
           // Title-generation requests just get a title.
           if (body.includes("You name conversations")) return Stream.make(Llm.text("MCP greet"))
           const first = !called
           called = true
           return first
             ? Stream.make(Llm.toolCall({ index: 0, id: "call_1", name: "demo_greet", input: { name: "Damien" } }))
             : Stream.make(Llm.text("done"))
         })
         yield* ui.submit("Greet Damien using the demo MCP tool")
         let requests = yield* opencode.permission.request.list().pipe(Effect.orDie)
         for (let i = 0; i < 30 && requests.data.length === 0; i++) {
           yield* Effect.sleep(1000)
           requests = yield* opencode.permission.request.list().pipe(Effect.orDie)
         }
         yield* Effect.sleep(1000)
         yield* Effect.log("PENDING PERMISSION REQUESTS: " + JSON.stringify(requests, null, 2))
         yield* ui.screenshot("tui-permission")
       }),
   )

   Run it with opencode-drive: opencode-drive run ./drive.ts. It drives opencode from your PATH; set OC_DEV to the path of an OpenCode checkout to run that from source instead.
5. opencodejr

   added

   reproduced

   on Oct 28, 2026