{"version":"2.1.260","anchor":"artifact-reads-now-check-per-url-deny-rules","canonical_anchor":"artifact-reads-now-check-per-url-deny-rules","heading":"Artifact reads now check per-URL deny rules","tier":"notice","area":"Artifacts","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.260\/e\/artifact-reads-now-check-per-url-deny-rules","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.260","markdown":"### Artifact reads now check per-URL deny rules\n\nArtifact reads now respect your deny rules matched on the artifact URL.\n\nArtifact read and asset requests, specifically `list_assets` and `read_asset` (but not `delete_asset`), are now checked against the user's permission deny rules matched on the artifact URL before proceeding. A request blocked this way is refused with a message naming the specific tool and deny rule, for example \"Reading this artifact is blocked by your ${toolName} deny rule.\"\n\n- Area: Artifacts\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 1\/5"}