Follow Discord
Sweep 10 Nov 2026 · 02:18Z Build v2.1.322 539 read Stable v2.1.311 Latest v2.1.322 Next v2.1.322 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.268 ·

MCP-over-HTTP tool exposure disables background tasks and unsandboxed commands

Listing tools from HTTP-based MCP servers now runs in a restricted context with background tasks and unsandboxed commands disabled

You'll notice Improvements
JSON All of v2.1.268
You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
MCPArea: what it touches
ImprovementsKind: in v2.1.268,
ImprovementsSection of the release
What

When Claude Code lists available tools from an MCP server that uses the 'http' transport, it now does so inside an isolated context that has background tasks and unsandboxed (unrestricted) command execution turned off. This restriction is skipped if those things are already disabled globally.

Why

This limits what an HTTP-based MCP server can trigger just by being asked to list its tools, reducing the risk that listing tools from a remote server could kick off background work or run commands outside the sandbox.

See this entry in the whole of v2.1.268 →

Feedback