Follow Discord
Sweep 08 Oct 2026 · 18:53Z Build v2.1.295 516 read Stable v2.1.286 Latest v2.1.295 Next v2.1.295 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.290 ·

WebFetch refuses hook approvals that attach arguments it can't check

If a PermissionRequest hook approves a web fetch but attaches arguments WebFetch can't check, Claude Code now denies the fetch

You'll notice Improvements
JSON All of v2.1.290
You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
HooksArea: what it touches
ImprovementsKind: in v2.1.290,
ImprovementsSection of the release

Unclear Exactly which hook replies cause a fetch to be denied is not settled.

What

WebFetch is the tool Claude uses to read a web page. A PermissionRequest hook is your own script that runs when a tool call needs a permission decision, and it can approve the call. If such a hook approves a fetch but also attaches arguments WebFetch cannot check, Claude Code now denies the fetch. The message says nothing was fetched because the hook approved it with arguments WebFetch cannot check. This kind of approval is also never treated as one an automatic classifier could approve.

Why

It stops a hook from changing the address or the request on its way through without the permission check seeing what changed.

How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtExactly which hook replies cause a fetch to be denied is not settled.

See this entry in the whole of v2.1.290 →

Feedback