Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.238 Home All releases ←olderv2.1.237 v2.1.239newer→
Claude Code v2.1.238

MCP header-minting commands run through the shared trusted-command runner

You'll notice
Useful3 Signal3
MCP

MCP header-minting commands now run with credentials stripped from their environment.

headersHelper
What

A headersHelper command declared by an MCP server no longer shells out directly with your full environment. It runs through the same runner used for other repo-declared commands, which picks the working directory from where the config lives and strips credential environment variables for project, plugin and additional-directory configs.

Details
  • The working directory is the plugin root, the declaring directory, or the current directory, depending on where the config came from.
  • If the workspace has no saved trust decision, the helper is refused with a printed explanation rather than an exception, with a distinct message for sessions rooted at your home directory.
  • Failure messages are now written per reason, including a new "did not return valid JSON" case.
Evidence

did not return valid JSON

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.1.238 →