My MCP server's confirm: true flag was written by the model. So I moved the approval to the user.

· Dev.to