Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.224 Home All releases ←olderv2.1.223 v2.1.225newer→

Claude Code v2.1.224 7 Aug 2026

MCP tools that need you to click through are not silently pre-approved

You'll notice

Useful5 Signal3

MCP

MCP tools that need you to click through always reach you instead of being auto-approved.

What

An MCP tool that declares it requires user interaction no longer has its permission re-checked in the background and auto-proceeded when the check returns "allow". Those tools always reach you.

Details

The background re-check bails out when the tool reports requiresUserInteraction, which comes from the MCP metadata key anthropic/requiresUserInteraction.
Separately, the permission-prompt telemetry event now records isMcp, distinguishing MCP tools from built-in ones.

Evidence

anthropic/requiresUserInteraction

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.224 →