Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Slack IntegrationArea: what it touches
Internal ChangesKind: in v2.1.265,
Internal ChangesSection of the release
What
For sessions started from Slack (referred to as "Claude Tag"), a new system-prompt block lists the session's connector MCP tool name prefixes and tells the model that writes through those specific tools aren't blocked merely for lacking a visible user request in the transcript.
Hard blocks still apply: credential/secret exposure, destructive actions, permission changes, and messaging others are still enforced.
The block is controlled by a new remote-config flag, tagConnectorWrites, which currently defaults to off (false).
Why
Slack-delegated sessions often act on a connector tool without an explicit chat request behind each individual write; this exception is meant to stop the security monitor from blocking those legitimate writes, while keeping the more serious hard blocks in place. It isn't turned on yet.
