Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.234 Home All releases ←olderv2.1.233 v2.1.235newer→
Claude Code v2.1.234

Permission prompts sent to IDEs and MCP servers are scrubbed and no longer broadcast

You'll notice
Useful4 Signal3
Permissions

Permission requests sent to IDEs and MCP servers are now redacted, truncated and no longer broadcast to everyone.

What

When Claude Code asks an IDE or an MCP server to approve a tool call, the description it sends is now run through secret redaction, whitespace collapsing and middle-elision truncation instead of being forwarded as-is. The request also goes only to servers that finished registering their permission channel, rather than to every connected server that advertised support for one.

Details
  • The registration check (isServerRegistered) is a third condition added on top of the existing connection and capability checks.
  • The description is sanitized by a new display-only redaction pass whose rule set deliberately skips shell punctuation and path-like matches.
  • Both changes apply unconditionally on the forwarding paths.
Evidence

isServerRegistered

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.234 →