Group of 2 Under the hood
A new remote-config flag lets Slack-delegated sessions write through specific connector tools without a visible user request, currently disabled
What
- For sessions started from Slack (referred to as "Claude Tag"), a new system-prompt block lists the session's connector MCP tool name prefixes and tells the model that writes through those specific tools aren't blocked merely for lacking a visible user request in the transcript.
- Hard blocks still apply: credential/secret exposure, destructive actions, permission changes, and messaging others are still enforced.
- The block is controlled by a new remote-config flag,
tagConnectorWrites, which currently defaults to off (false).
Why Slack-delegated sessions often act on a connector tool without an explicit chat request behind each individual write; this exception is meant to stop the security monitor from blocking those legitimate writes, while keeping the more serious hard blocks in place. It isn't turned on yet.