Ho to get consent when MCP flow in running completely on the server

[michelschep]

Pre-submission Checklist

• I have checked that this question would not be more appropriate as an issue in a specific repository
• I have searched existing discussions and documentation for answers

Question Category

• Protocol Specification
• SDK Usage
• Server Implementation
• General Implementation
• Documentation
• Other

Your Question

On my current project we are using MCP on the server.
The stack is dotnet/C#/semantic kernel/web app azure
Semantic Kernel is receiving a request (question from the user chat bot).
Then we ask the LLM to answer the question (related to azure devops scrum board).
Because we are using MCP the orchestrator (SK) is calling the MCP endpoints.
At the end the LLM will ask to write something to azure devops.
That's all working fine.
However we want/need to put user consent in the loop.
Anyone experience on how to do that in a fully server flow situation?

My thoughts:

• ask permission at the start for all write actions
• or stop the flow on the moment the LLM want to write something to azure
  I prefer option one but I'm not sure if that is really a secure option.

What is a best practice of experience/opinion you have?

[ardaguclu]

I think elicitation https://modelcontextprotocol.io/docs/concepts/elicitation what you need

[michelschep]

Thx! Now watching something about elicitation: https://www.youtube.com/watch?v=DoezQYWzRBw&t=580s
Thanks for your help!