You'll notice
An MCP policy rule referencing a blanked credential variable now logs a warning that it cannot match a literal value.
When an MCP policy predicate (an allow/deny rule) references an environment variable that's treated as a credential and blanked out for matching purposes, Claude Code now logs a warning explaining that the rule can't match a config which spells the value out literally.