DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.
Org admins can now set a per-tool permission ceiling via a new org_max_permission field on MCP server tool policies. When set to "ask", it forces a user confirmation prompt even in auto mode (the isOrgAskCeiling gate).
Evidence
New Zod field (search for "Org admin's per-tool ceiling. Drives the auto-mode isOrgAskCeiling gate")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.