Write actions blocked on custom MCP server – Business plan workspace, Developer Mode unavailable at workspace level

I’m having the same issue with a custom MCP server on a personal Plus plan.

I’m running an instance of the iris-networks/terminal_mcp MCP server (not allowed to paste the GitHub link) and connecting it to a custom OpenAI app over a secure tunnel. When I use it in ChatGPT, OpenAI will frequently block tool calls and return this response to ChatGPT:

“This tool call was blocked by OpenAI’s safety checks. Please double check what you are sending.”

There isn’t much consistency over what tool calls OpenAI will block and which it won’t. Often ChatGPT will be able to try again and succeed, other times, nearly all or absolutely all tool calls to the MCP will be blocked by OpenAI.

Some clarity from OpenAI on why this is happening and what the expected patterns are to avoid this would be appreciated.