You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
MCPArea: what it touches
ImprovementsKind: in v2.1.268,
ImprovementsSection of the release
What
When Claude Code lists available tools from an MCP server that uses the 'http' transport, it now does so inside an isolated context that has background tasks and unsandboxed (unrestricted) command execution turned off. This restriction is skipped if those things are already disabled globally.
Why
This limits what an HTTP-based MCP server can trigger just by being asked to list its tools, reducing the risk that listing tools from a remote server could kick off background work or run commands outside the sandbox.