Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.247 Home All releases ←olderv2.1.246 v2.1.248newer→
Claude Code v2.1.247

Cloud bridge MCP server URLs are checked against this session's own route

You'll notice
Useful2 Signal3
MCP

MCP URLs from the cloud bridge must match your own session route or they're dropped.

What

The MCP server URL handed over by the cloud bridge previously only had to sit on the bridge's origin. It now has to be this session's own proxy route or it is dropped with a warning, closing off a bridge-supplied URL pointing at another session or a crafted path.

Details
  • The URL must parse to that exact origin, carry no credentials and no fragment, and match the /v2/ccr-sessions/<sessionId>/mcp path for the current session.
  • Only allow-listed query parameters are permitted, with a fixed toolbox server id.
  • The nested inner URL must itself be the canonical path on the same origin, and the server id must match a fixed pattern.
Evidence

[bridge:server-config] meta url is not this session's meta proxy route on the bridge origin

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.247 →