Claude Code v2.1.221 ·
Completed MCP OAuth is discarded if identity changed or the server was disabled
A finished MCP login is now thrown away if you switched accounts or the server got disabled meanwhile.
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
MCPArea: what it touches
ImprovementsKind: in v2.1.221,
ImprovementsSection of the release
What
A finished OAuth flow is now re-validated before its connection is kept, so a flow that outlived its preconditions cannot produce a live connection.
Details
- Account identity is re-checked both before and after the reconnect.
- The server is re-checked against disabled state and managed policy after completion.
- Stale or now-forbidden results are dropped, with distinct debug messages per case.
Evidence
OAuth completed but the server is now disabled or policy-blocked; not reconnecting
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
See this entry in the whole of v2.1.221 →
