What
When Claude Code asks an IDE or an MCP server to approve a tool call, the description it sends is now run through secret redaction, whitespace collapsing and middle-elision truncation instead of being forwarded as-is. The request also goes only to servers that finished registering their permission channel, rather than to every connected server that advertised support for one.
Details
- The registration check (
isServerRegistered) is a third condition added on top of the existing connection and capability checks. - The description is sanitized by a new display-only redaction pass whose rule set deliberately skips shell punctuation and path-like matches.
- Both changes apply unconditionally on the forwarding paths.
Evidence
isServerRegistered
Strings lifted out of the shipped bundle, so the claim above can be checked against them.