Research The tool blocked it, but the agent kept going. An MCP tool denied a production change, so the control looked like it worked. The agent switched to Bash and made the same change anyway. A block on one tool does not prove the action is blocked. Read more