From the source
Cursor introduces Auto-review, a new run mode that reduces approval prompts and enables safer execution for Shell, MCP, and Fetch tool calls, with allowlisted calls running immediately and sandboxable calls running in a sandbox, while other actions are handled by a classifier subagent.





