What probably matters to youSection of the release
What
Apps that embed Claude Code control it by sending it requests. The set_mcp_permission_mode_override request now accepts an askForTools list when the mode is default. Any tool named in that list will ask for permission before running, even if it would otherwise allow itself to run.
Right now the only tools that allow themselves are Claude in Chrome's safe tools that run without asking.
Why
Hosts get finer control over which tools from MCP servers, the outside programs that give Claude Code extra tools, can run without asking.
Read from
Names in the bundleset_mcp_permission_mode_overrideaskForTools
