MCP servers are outside tools that Claude Code can connect to. When a connection goes through a proxy (a middle server) that also carries an mcp_url, and a blocklist entry matches, the debug log now names both hosts: "the proxy host X or the mcp_url host Y".
Why
The log now shows which two addresses were checked, so a matched entry is easier to trace back to its source.