Under the hood
MCP toolPolicy docs and wildcard logic were simplified by dropping the ask-session case.
The long-form docs for managedMcpServers' toolPolicy were rewritten and simplified. The previous documentation of an "ask-session" clamp — session-scoped "Allow for this task" tool approval with special wildcard precedence rules — no longer appears, and the wildcard precedence logic itself was simplified to remove the special ask-session case.
Names in the bundletoolPolicy
Documented inclaude-code/desktop
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up toolPolicy, on MCP, plugins, skills, and hooks.
| `.mcp.json` | MCP servers bundled with this plugin. A JSON object keyed by server name: `{"mcpServers": {"<name>": {"type": "http", "url": "...", "oauth": true}}}`. A remote entry uses `type` (`http` or `sse`), not `transport`, and suppo…third-party/claude-desktop/extensions see the edit
Two sources agreeTwo things we can check say the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up toolPolicy, on MCP, plugins, skills, and hooks.
Anthropic's release notes agree
Changed Claude apps gateway to also refuse to start, naming the field, when a desktop policy misspells a field in a nested object of a…