You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
Cloud SessionsArea: what it touches
New FeaturesKind: in v2.1.238,
What probably matters to youSection of the release
What
When Claude Code copies your working files up to a cloud or lane session, each path is now checked against a credential test and refused outright instead of uploaded. .mcp.json and .claude.json join .claude in the set of sensitive names.
Details
Refusal short-circuits before the file is even fetched, and is carried as its own result flag rather than as a generic failure.
Counts are reported separately for refused files, files withheld even though git tracks them, and files skipped by the filter, along with how long the filter took and how many decisions it settled.
Rewind and checkpoint listings label such paths as "sensitive" so you can see why they were left behind.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeMCP headersHelper in a project .mcp.json, and inline MCP servers in project or --add-dir agent files, now require that folder's trust dialog…
