DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.
MCP server tool permissions now support a permission_policy field carried on mcp_set_servers for remote servers, allowing administrators to pre-configure allowed/denied tool lists for MCP tools.
Evidence
Permission policies (search for "permission_policy") — 2 occurrences in v2.1.110, 5 in v2.1.111
Strings lifted out of the shipped bundle, so the claim above can be checked against them.