Under the hood
Claude Code's ambient-credential check for MCP servers now looks only at the server URL
What
Claude Code flags an HTTP or SSE-based MCP server as using an 'ambient credential' when it appears to pick up authentication automatically rather than through an explicit credential you provided. That check now looks only at the server's URL instead of the entire server configuration object, and a new helper combines it with checks for static auth headers and CLI-owned servers.
Why
Narrowing the check to just the URL makes the ambient-credential detection more targeted, reducing the chance that unrelated configuration fields affect whether a server gets flagged.