From Dev.to
Letting an AI agent say "yes" safely: a two-step accept for MCP tools
Short answer: if a tool call has real consequences for a person, split it into two calls. The first one only prepares and returns a summary. The second one commits, and it should only be reachable aft...