{"name":"tengu_agent_hooks_origin_untrusted","slug":"tengu-agent-hooks-origin-untrusted","family":"flag","title":"Feature flags","noun":"feature flag","description":"Agents in untrusted folders can no longer define inline MCP servers; trust the project to allow it.","description_source":"entry","described_by":{"version":"2.1.238","anchor":"agents-in-untrusted-folders-can-no-longer-define-inline-mcp-"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":{"version":"2.1.238","released_at":"2026-08-20 18:01:54","spans":1}},"aliases":[],"entries":[{"version":"2.1.238","anchor":"agents-in-untrusted-folders-can-no-longer-define-inline-mcp-","heading":"Agents in untrusted folders can no longer define inline MCP servers","line":"Agents in untrusted folders can no longer define inline MCP servers; trust the project to allow it.","released_at":"2026-08-20 18:01:54","reason":"gate cited by this entry, found in this entry's text"}],"entries_total":1,"docs":[],"docs_total":0,"gates":[],"related":[{"name":"tengu_agent_frontmatter_mode_widening_carry_ignored","slug":"tengu-agent-frontmatter-mode-widening-carry-ignored","description":"An agent definition's permissionMode can no longer widen the mode inherited from its parent context."},{"name":"tengu_agent_list_attach","slug":"tengu-agent-list-attach","description":"Default `false`. When `CLAUDE_CODE_AGENT_LIST_IN_MESSAGES` is unset or not a recognised boolean, `true` sends the `Agent` tool's list of agent types as `agent_listing_delta` attachments in the conversation (after the first, only the added and removed types) and leaves it out of the tool description. A truthy `CLAUDE_CODE_DISABLE_ATTACHMENTS` or `CLAUDE_CODE_SIMPLE` keeps the list in the description."},{"name":"tengu_agent_proxy_download_queue","slug":"tengu-agent-proxy-download-queue","description":"Download backlog on the agent proxy is now reported as a telemetry event."},{"name":"tengu_agent_proxy_failure_note","slug":"tengu-agent-proxy-failure-note","description":"Proxy connection failures during a command are summarised afterwards, grouped by host, with a curl pointer."},{"name":"tengu_agent_summary_skipped","slug":"tengu-agent-summary-skipped","description":"Background-agent summaries now get rejected outright if unparseable, with a running count of failures"},{"name":"tengu_agent_tool_selected","slug":"tengu-agent-tool-selected","description":"SDK result messages now include a summary of the subagents your session started."},{"name":"tengu_agent_worktree_cwd_escape_blocked","slug":"tengu-agent-worktree-cwd-escape-blocked","description":"Agent commands now have a concrete worktree boundary, so escapes get blocked with a clearer log line."},{"name":"tengu_agents_md_mod","slug":"tengu-agents-md-mod","description":"A new built-in agents-md plugin can load AGENTS.md as project instructions instead of, or alongside, CLAUDE.md"},{"name":"tengu_agentview_inherit_mode_demote","slug":"tengu-agentview-inherit-mode-demote","description":"A hidden --inherit-permission-mode flag lets a spawned session take its permission mode from whatever launched it."}],"url":"https:\/\/changelogs.core-directive.com\/reference\/flag\/tengu-agent-hooks-origin-untrusted","family_url":"https:\/\/changelogs.core-directive.com\/reference\/flag.json"}