docs: note that unannotated MCP tools skip approval

[bhaveshpatel640]

docs: note that unannotated MCP tools skip approval

---

Note

Low Risk
Documentation-only changes to agent tool-approval defaults and MCP annotation behavior; no runtime code in this diff.

Overview
Updates Create an Agent docs so tool approval behavior matches the product: require_approval_for_tools defaults to ["@destructive"], not @write and @destructive.

Adds a Note explaining that @write / @destructive apply only to MCP tools the server annotates — unannotated or readOnlyHint: true tools are not paused by default (even if they mutate state), with guidance to use literal tool names or @all when you need approval anyway. The UI checklist and mcp_servers API table are updated accordingly, plus clearer rules for how annotation selectors resolve.

^{Reviewed by Cursor Bugbot for commit b678c7c. Bugbot is set up for automated code reviews on this repo. Configure here.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: b678c7c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR