ChatGPT Started Requesting Permission to All Read-Only, Internal Business Workspace Tool Calls

[lilac kelp]

Reported by @bright flame

Bug Report: ChatGPT Started Requesting Permission to All Read-Only, Internal Business Workspace Tool Calls

`Steps to Reproduce`

Create a custom internal app that uses an MCP server. Annotate your read-only tools and implement basic OpenAI Cookbook search and fetch behavior. Using Developer Mode, add this test MCP server into your business workspace and connect it to the chat. Ask it a question that uses a tool call.

`Expected Result`

ChatGPT executes the tool call without prompting the user for permission, as it had been before.

`Actual Result`

ChatGPT asks for permission on every tool call, even when tool annotations and descriptions are clear and it has been told not to. Unfortunately, this makes our internal application (which we switched to ChatGPT Business to use) unworkable.

`Environment`

Chrome

Jan 30, 2026, 6:58 PM

Additional Information

Please provide relevant details to help resolve the issue, such as:

• ChatGPT Shared Link (if applicable).
• Screenshots or videos demonstrating the problem.

-# ➜ Need to contact support? Visit the OpenAI Help Center.

[bright flame]

This is an image. It requests the user to confirm running the tool, even though they're clearly sent to read-only, and they match that in the tool description. This used to not happen.