diff --git a/codex-rs/exec-server/src/posix/mcp_escalation_policy.rs b/codex-rs/exec-server/src/posix/mcp_escalation_policy.rs
index 24f42fe91b7..39958bb4f94 100644
--- a/codex-rs/exec-server/src/posix/mcp_escalation_policy.rs
+++ b/codex-rs/exec-server/src/posix/mcp_escalation_policy.rs
@@ -6,8 +6,6 @@ use rmcp::model::CreateElicitationRequestParam;
 use rmcp::model::CreateElicitationResult;
 use rmcp::model::ElicitationAction;
 use rmcp::model::ElicitationSchema;
-use rmcp::model::PrimitiveSchema;
-use rmcp::model::StringSchema;
 use rmcp::service::RequestContext;
 
 use crate::posix::escalate_protocol::EscalateAction;
@@ -54,12 +52,19 @@ impl McpEscalationPolicy {
         context
             .peer
             .create_elicitation(CreateElicitationRequestParam {
-                message: format!("Allow Codex to run `{command:?}` in `{workdir:?}`?"),
-                #[allow(clippy::expect_used)]
+                message: format!("Allow agent to run `{command}` in `{}`?", workdir.display()),
                 requested_schema: ElicitationSchema::builder()
-                    .property("dummy", PrimitiveSchema::String(StringSchema::new()))
+                    .title("Execution Permission Request")
+                    .optional_string_with("reason", |schema| {
+                        schema.description("Optional reason for allowing or denying execution")
+                    })
                     .build()
-                    .expect("failed to build elicitation schema"),
+                    .map_err(|e| {
+                        McpError::internal_error(
+                            format!("failed to build elicitation schema: {e}"),
+                            None,
+                        )
+                    })?,
             })
             .await
             .map_err(|e| McpError::internal_error(e.to_string(), None))