Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.224 ·

MCP tools that need you to click through are not silently pre-approved

MCP tools that need you to click through always reach you instead of being auto-approved.

You'll notice Improvements
JSON All of v2.1.224
You'll noticeTier: how much it should matter to you
5Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
MCPArea: what it touches
ImprovementsKind: in v2.1.224,
What probably matters to youSection of the release
What

An MCP tool that declares it requires user interaction no longer has its permission re-checked in the background and auto-proceeded when the check returns "allow". Those tools always reach you.

Details
  • The background re-check bails out when the tool reports requiresUserInteraction, which comes from the MCP metadata key anthropic/requiresUserInteraction.
  • Separately, the permission-prompt telemetry event now records isMcp, distinguishing MCP tools from built-in ones.
Evidence

anthropic/requiresUserInteraction

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.224 →

Feedback