{"version":"2.1.290","anchor":"mcp-tool-permission-ceiling-propagated","canonical_anchor":"mcp-tool-permission-ceiling-propagated","heading":"MCP tools can carry an ask-only permission limit","tier":"notice","area":"MCP","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.290\/e\/mcp-tool-permission-ceiling-propagated","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.290","markdown":"### MCP tools can carry an ask-only permission limit\n\nWhen an MCP tool's highest permission is ask, Claude Code now passes that limit along with the tool's other permission details\n\n**Unclear.** What sets a tool's maximum permission to ask, and whether anything does yet, is not clear.\n\n**What**\n\nMCP (Model Context Protocol) is a way to connect outside tools to Claude Code. When an MCP tool's maximum permission is set to ask, Claude Code now records an ask limit for that tool and passes it along with the tool's other permission details.\n\n**Why**\n\nAn ask limit is meant to keep a tool from being approved automatically, so it would always need your go-ahead.\n\n- Area: MCP\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 2\/5\n- Scope: individual\n- Heads-up: no"}