A human-in-the-loop MCP server for approvals

• Seven tools: request_approval, ask_question, notify, check_request, wait_requests, cancel_request and list_requests.
• Supports MCP 2024-11-05 through 2026-07-28; stdout carries only protocol messages.
• No call blocks longer than 300 seconds: ask with wait=false and collect the answer with wait_requests.
• A denial is a normal answer, not a tool error.

1. Install handup

   On glibc Linux or macOS, use the install script below. On Alpine, use the musl APK package from the downloads page instead. On Windows, download the desktop EXE or CLI ZIP instead of running the install script: the desktop app starts the daemon, or run handup serve in its own terminal for the CLI ZIP. The service command below is Linux/macOS only. (handup setup starts handup and connects every agent it finds in one go; Windows has no background service.)

   curl -fsSL https://github.com/gethandup/handup/releases/latest/download/install.sh | shCopy
   handup service install # Linux/macOS only; on Windows run handup serveCopy

2. Connect detected agents

   handup integrate all configures Claude Code, Codex, Cursor and omp if it finds them. Preview first with --dry-run.

   handup integrate all --dry-runCopy
   handup integrate allCopy

3. Or add the server yourself

   Any client that runs stdio servers can start handup mcp in the project directory. For Gemini CLI:

   gemini mcp add -s user --trust handup handup mcpCopy

• request_approval carries a title, summary, risk and previews (command, diff, file, email and more), plus optional editable input and custom options.
• ask_question offers choices, free text, or both.
• The decision comes back as JSON: status, chosen option, your feedback, the content hash, and any edited fields or answers.

• MCP is explicit: handup sees only what the model chooses to ask. Use an agent's hook or bridge to forward its built-in prompts.

Full details: the Any MCP client guide in the handup docs.