What
mcp serve runs Claude Code as an MCP server. MCP (Model Context Protocol) is a standard way for one program to offer tools to another, so this lets other programs use Claude Code's tools.
When a tool call arrives, Claude Code now uses permission settings passed in with the call, if there are any. It can refuse the call and send back a message saying why. Before, every call used default settings.
Why
Permission rules can now apply to tools that other programs call through mcp serve, not only to tools used directly inside Claude Code.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
What supplies these permission settings with each call is not clear.