Under the hood
MCP server addresses are now redacted before being logged or sent in telemetry
What
Claude Code can connect to MCP servers (external tool providers) over various endpoints and commands. New internal helper functions now parse an MCP server's endpoint before it's reported in logs or telemetry, and redact anything sensitive: they mask template placeholders, strip credentials and file paths from URLs down to just the origin or host, and replace sensitive substrings with x characters or ${...} placeholders.
Why
This prevents credentials, file paths, or other sensitive details embedded in an MCP server's connection string from leaking into logs or telemetry data.