{"name":"tengu_cowork_auto_mode_include_allowed_write_mcp","slug":"tengu-cowork-auto-mode-include-allowed-write-mcp","family":"flag","title":"Feature flags","noun":"feature flag","description":"MCP tools that may act on a session's desktop now need approval each time, and remote-session MCP prompts cannot become always-allow rules","description_source":"entry","described_by":{"version":"2.1.290","anchor":"mcp-desktop-tools-reviewed-on-every-call-remote-session-mcp"},"presence":{"first_seen":"2.1.212","removed_in":null,"in_current_build":true,"newest_mined":"2.1.308","builds":85,"mined_builds":149,"first_cited":{"version":"2.1.295","released_at":"2026-10-08 18:22:58","spans":1}},"aliases":[],"entries":[{"version":"2.1.299","anchor":"tengu-dapper-truffle-server-arbiter-check-for-mcp-destructiv","heading":"Auto mode's MCP write checks gain a server-decided option and accept command rules","line":"Auto mode's check of allowed MCP write tools now accepts rules from a command and adds a server-side decision path that is off by default","released_at":"2026-10-14 00:23:19","reason":"gate cited by this entry"},{"version":"2.1.295","anchor":"cowork-auto-mode-can-include-allowed-write-mcp-tools-remote","heading":"Auto mode in remote sessions can check allowed MCP write actions","line":"In remote sessions, MCP actions that change things and are allowed by policy can now be passed to auto mode's safety check","released_at":"2026-10-08 18:22:58","reason":"gate cited by this entry"},{"version":"2.1.290","anchor":"mcp-desktop-tools-reviewed-on-every-call-remote-session-mcp","heading":"MCP tools that act on your desktop now ask on every call","line":"MCP tools that may act on a session's desktop now need approval each time, and remote-session MCP prompts cannot become always-allow rules","released_at":"2026-10-05 18:12:44","reason":"gate cited by this entry, found in this entry's text"},{"version":"2.1.290","anchor":"mcp-tools-that-may-act-on-a-desktop-are-forced-to-ask-remot","heading":"MCP tools that may act on your desktop now always ask for approval","line":"MCP tools that may act on the session's desktop now ask on every call, and allow rules, hooks and plugins cannot approve them","released_at":"2026-10-05 18:12:44","reason":"gate cited by this entry"}],"entries_total":4,"docs":[],"docs_total":0,"gates":[{"version":"2.1.299","state":"on-in-practice","account":true,"baseline":true,"code_default":false},{"version":"2.1.295","state":"on-in-practice","account":true,"baseline":true,"code_default":false},{"version":"2.1.290","state":"on-in-practice","account":true,"baseline":true,"code_default":false}],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/flag\/tengu-cowork-auto-mode-include-allowed-write-mcp","family_url":"https:\/\/changelogs.core-directive.com\/reference\/flag.json"}