You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PluginsArea: what it touches
ImprovementsKind: in v2.1.290,
ImprovementsSection of the release
What
Plugins are add-ons that extend Claude Code, and some can check a tool's permission before it runs. That check now also receives:
the ID of the agent making the request
descriptions of extra tools, including MCP tools from outside tool servers
Plugins can still only make permissions stricter, never looser. That rule now applies to MCP tools as well. The warning shown when a plugin tries to loosen one now says it can only tighten the permission "in this session" instead of "in a Projects session".
Why
Plugins can now make permission decisions for agents and MCP tools, while the rule that they cannot grant extra access still holds.
