diff --git a/ui/src/apps/issue-write/App.tsx b/ui/src/apps/issue-write/App.tsx
index fedb7f24f..6c46b8c08 100644
--- a/ui/src/apps/issue-write/App.tsx
+++ b/ui/src/apps/issue-write/App.tsx
@@ -33,12 +33,14 @@ function SuccessView({
   repo,
   submittedTitle,
   isUpdate,
+  openLink,
 }: {
   issue: IssueResult;
   owner: string;
   repo: string;
   submittedTitle: string;
   isUpdate: boolean;
+  openLink: (url: string) => Promise<void>;
 }) {
   const issueUrl = issue.html_url || issue.url || issue.URL || "#";
 
@@ -87,6 +89,14 @@ function SuccessView({
             href={issueUrl}
             target="_blank"
             rel="noopener noreferrer"
+            onClick={(e) => {
+              // MCP Apps run in a sandboxed iframe where a plain anchor may be
+              // blocked, so route the click through the host's open-link
+              // capability (falls back to window.open).
+              e.preventDefault();
+              if (issueUrl === "#") return;
+              void openLink(issueUrl);
+            }}
             style={{
               fontWeight: 600,
               fontSize: "14px",
@@ -121,7 +131,7 @@ function CreateIssueApp() {
   const [error, setError] = useState<string | null>(null);
   const [successIssue, setSuccessIssue] = useState<IssueResult | null>(null);
 
-  const { app, error: appError, toolInput, callTool, hostContext, setModelContext } = useMcpApp({
+  const { app, error: appError, toolInput, callTool, hostContext, setModelContext, openLink } = useMcpApp({
     appName: "github-mcp-server-issue-write",
   });
 
@@ -232,6 +242,7 @@ function CreateIssueApp() {
         repo={repo}
         submittedTitle={title}
         isUpdate={isUpdateMode}
+        openLink={openLink}
       />
     );
   }
diff --git a/ui/src/apps/pr-write/App.tsx b/ui/src/apps/pr-write/App.tsx
index abbeacb12..245753a1b 100644
--- a/ui/src/apps/pr-write/App.tsx
+++ b/ui/src/apps/pr-write/App.tsx
@@ -36,11 +36,13 @@ function SuccessView({
   owner,
   repo,
   submittedTitle,
+  openLink,
 }: {
   pr: PRResult;
   owner: string;
   repo: string;
   submittedTitle: string;
+  openLink: (url: string) => Promise<void>;
 }) {
   const prUrl = pr.html_url || pr.url || pr.URL || "#";
 
@@ -89,6 +91,14 @@ function SuccessView({
             href={prUrl}
             target="_blank"
             rel="noopener noreferrer"
+            onClick={(e) => {
+              // MCP Apps run in a sandboxed iframe where a plain anchor may be
+              // blocked, so route the click through the host's open-link
+              // capability (falls back to window.open).
+              e.preventDefault();
+              if (prUrl === "#") return;
+              void openLink(prUrl);
+            }}
             style={{
               fontWeight: 600,
               fontSize: "14px",
@@ -126,7 +136,7 @@ function CreatePRApp() {
   const [isDraft, setIsDraft] = useState(false);
   const [maintainerCanModify, setMaintainerCanModify] = useState(true);
 
-  const { app, error: appError, toolInput, callTool, hostContext, setModelContext } = useMcpApp({
+  const { app, error: appError, toolInput, callTool, hostContext, setModelContext, openLink } = useMcpApp({
     appName: "github-mcp-server-create-pull-request",
   });
 
@@ -199,7 +209,7 @@ function CreatePRApp() {
   if (successPR) {
     return (
       <AppProvider hostContext={hostContext}>
-        <SuccessView pr={successPR} owner={owner} repo={repo} submittedTitle={submittedTitle} />
+        <SuccessView pr={successPR} owner={owner} repo={repo} submittedTitle={submittedTitle} openLink={openLink} />
       </AppProvider>
     );
   }
diff --git a/ui/src/hooks/useMcpApp.ts b/ui/src/hooks/useMcpApp.ts
index b060ea6ee..cf386520f 100644
--- a/ui/src/hooks/useMcpApp.ts
+++ b/ui/src/hooks/useMcpApp.ts
@@ -106,7 +106,12 @@ export function useMcpApp({
         window.open(url, "_blank", "noopener,noreferrer");
         return;
       }
-      await app.openLink({ url });
+      const result = await app.openLink({ url });
+      // The host may deny the request (e.g. blocked domain or user cancelled).
+      // Fall back to a direct window.open so the link still works.
+      if (result?.isError) {
+        window.open(url, "_blank", "noopener,noreferrer");
+      }
     },
     [app]
   );