Follow Discord
Sweep 22 Sep 2026 · 17:19Z Build v2.1.280 501 read Stable v2.1.267 Latest v2.1.280 Next v2.1.280 Feeds RSS JSON llms.txt Unofficial
Claude Code v2.1.257 ·

.mcp.json now has a size/type guard before parsing

Reading .mcp.json now rejects a non-regular file or one over a size cap with a clear error before parsing.

TierYou'll noticehow much it should matter to you
Useful2my rating, 1 to 5
Signal2worth watching, 1 to 5
AreaMCPwhat it touches
KindBug Fixesin v2.1.257,
You'll notice

Reading .mcp.json now rejects a non-regular file or one over a size cap with a clear error before parsing.

Reading the project's .mcp.json now goes through a safe reader that rejects the file if it isn't a regular file or if it exceeds a byte-size cap, throwing a clear error instead of attempting to parse arbitrary content.

Read from
Names in the bundle.mcp.json
Since it was published

The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.

Added since A small documentation edit on Connect to MCP servers touched a line naming .mcp.json after this was published. * **Cloud sessions**: commit a `.mcp.json` to your repository. See [Edit .mcp.json directly](#edit-mcp-json-directly). mcp-quickstart see the edit
Confirmed since Anthropic's documentation has since written up .mcp.json, on MCP, plugins, skills, and hooks. | `.mcp.json` | MCP servers bundled with this plugin. A JSON object keyed by server name: `{"mcpServers": {"<name>": {"type": "http", "url": "...", "oauth": true}}}`. A remote entry uses `type` (`http` or `sse`), not `transport`, and suppo… third-party/claude-desktop/extensions see the edit
How sure we are
Two sources agreeTwo things we can check say the same as this entry.
Anthropic's documentation agreesAnthropic's documentation has since written up .mcp.json, on MCP, plugins, skills, and hooks.
Anthropic's release notes agreeFixed claude mcp add/remove hanging or exhausting memory when the project's .mcp.json is a FIFO or a device-file symlink; it now fails fast…

See this entry in the whole of v2.1.257 →

Feedback