{"version":"2.1.299","anchor":"tengu-dapper-truffle-server-arbiter-check-for-mcp-destructiv","canonical_anchor":"tengu-dapper-truffle-server-arbiter-check-for-mcp-destructiv","heading":"Auto mode's MCP write checks gain a server-decided option and accept command rules","tier":"notice","area":"Auto Mode","scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.299\/e\/tengu-dapper-truffle-server-arbiter-check-for-mcp-destructiv","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.299","markdown":"### Auto mode's MCP write checks gain a server-decided option and accept command rules\n\nAuto mode's check of allowed MCP write tools now accepts rules from a command and adds a server-side decision path that is off by default\n\n**What**\n\nIn auto mode, a classifier (an automatic checker) decides whether an action is safe instead of asking you. Allowed MCP tools that change things can be included in what it checks, based on where the `mcpServerPolicy` rule allowing them came from. That source can now also be a command, in addition to a command-line argument or the current session.\n\nThere is also a new path that hands the decision to the server. It applies only when the classifier's answer is to defer to the server and a matching `mcpServerPolicy` rule exists. It is off unless it is switched on remotely.\n\nWhether these MCP write tools are included at all is still controlled by a remote switch that is off by default. The flag server has returned that switch on for this site's account and for an account with no sign-in, though it has not yet been read under this release.\n\n**Why**\n\nThis prepares for letting a server decide on MCP write actions in auto mode, without changing anything until it is switched on.\n\n- Flag `tengu_dapper_truffle`: Not enough to say (read for one account on one subscription tier against v2.1.299; this account: no value returned, anonymous baseline: no value returned, compiled default: not a boolean we can read) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Flag `tengu_cowork_auto_mode_include_allowed_write_mcp`: Off by default, switched on for this account (read for one account on one subscription tier against v2.1.299; this account: on, anonymous baseline: on, compiled default: off) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Auto Mode\n- Names: `mcpServerPolicy`\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 3\/5\n- Scope: both\n- Heads-up: no"}