diff --git a/codex-rs/mcp-server/src/codex_tool_config.rs b/codex-rs/mcp-server/src/codex_tool_config.rs
index 899451a5..4af3e29c 100644
--- a/codex-rs/mcp-server/src/codex_tool_config.rs
+++ b/codex-rs/mcp-server/src/codex_tool_config.rs
@@ -34,7 +34,7 @@ pub struct CodexToolCallParam {
     pub cwd: Option<String>,
 
     /// Approval policy for shell commands generated by the model:
-    /// `untrusted`, `on-failure`, `never`.
+    /// `untrusted`, `on-failure`, `on-request`, `never`.
     #[serde(default, skip_serializing_if = "Option::is_none")]
     pub approval_policy: Option<CodexToolCallApprovalPolicy>,
 
@@ -63,6 +63,7 @@ pub struct CodexToolCallParam {
 pub enum CodexToolCallApprovalPolicy {
     Untrusted,
     OnFailure,
+    OnRequest,
     Never,
 }
 
@@ -71,6 +72,7 @@ impl From<CodexToolCallApprovalPolicy> for AskForApproval {
         match value {
             CodexToolCallApprovalPolicy::Untrusted => AskForApproval::UnlessTrusted,
             CodexToolCallApprovalPolicy::OnFailure => AskForApproval::OnFailure,
+            CodexToolCallApprovalPolicy::OnRequest => AskForApproval::OnRequest,
             CodexToolCallApprovalPolicy::Never => AskForApproval::Never,
         }
     }
@@ -244,10 +246,11 @@ mod tests {
             "type": "object",
             "properties": {
               "approval-policy": {
-                "description": "Approval policy for shell commands generated by the model: `untrusted`, `on-failure`, `never`.",
+                "description": "Approval policy for shell commands generated by the model: `untrusted`, `on-failure`, `on-request`, `never`.",
                 "enum": [
                   "untrusted",
                   "on-failure",
+                  "on-request",
                   "never"
                 ],
                 "type": "string"