You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Chrome & BrowserArea: what it touches
ImprovementsKind: in v2.1.260,
ImprovementsSection of the release
Browser-extension connections are now denied by the generic MCP/tool scope-permission check (Ah) when they don't come from the SDK, independent of the existing scope allowlist. This closes off a path that previously wasn't checked against the allow_claude_browser_extension gate.
