You'll notice
The MCP open-URL confirmation ignores a repeated Enter shortly after accepting, so key repeat cannot double-accept.
The confirm-and-open-URL prompt for MCP elicitation now tracks when it was accepted and ignores a repeated Enter press within a short window afterward, preventing key-repeat from firing the accept action twice.