Composio adds approval checkpoints before agent session tools run
As of Oct 16, Composio sessions can require a person's approval before selected toolkits, tools, or tagged tools execute: set requireApproval (require_approval in Python), catch the input-required error, show its requests, then resend the call with the answers. It covers meta-tool calls too, and over MCP it uses elicitation, with a deny-or-allow fallback for clients that can't ask.