MCP elicitation 让确认按钮绕过 agent 直达用户
演示 MCP 的 elicitation 机制：发信等破坏性操作由 MCP 服务器直接弹给 ChatGPT/Claude 客户端确认，agent 看不到也点不到确认键。
This is why MCP mogs an API. An agent could send an email to 1000s of people via an API, without you being able to stop it. With MCP elicitation, the agent initiates the call, but NEVER touches the confirmation. It goes straight from the MCP server -> client & you click send. In this example, imagine we tell an agent to send an email to all 2k of our subscribers but notice some info is wrong. We want to cancel it and fix that before it goes out. This is a "destructive" action that a overly proactive agent could do on its own via an API. Even if you sent it a deeplink back to your dashboard it could use computer use or devtools MCP to click the confirm button. With MCP, the agent never sees the confirmation button, it just goes straight to your MCP client (ChatGPT, Claude) and you have to confirm.