{"version":"2.1.307","anchor":"remote-tool-host-checks-repo-permission-rules-file-upload-t","canonical_anchor":"remote-tool-host-checks-repo-permission-rules-file-upload-t","heading":"Tools served over MCP can respect a repository's permission rules","tier":"notice","area":"MCP","scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.307\/e\/remote-tool-host-checks-repo-permission-rules-file-upload-t","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.307","markdown":"### Tools served over MCP can respect a repository's permission rules\n\nWhen Claude Code serves its tools to another app over MCP, it can apply the repository's permission rules and refuse calls if they cannot be read\n\n**Unclear.** It is not clear which apps send the request that turns on this check.\n\n**What**\n\nClaude Code can act as an MCP server, a program that offers its tools to another app. When a request from that app asks for it, Claude Code now:\n\n- reads the repository's permission rules and applies them to the call\n\n- refuses the call if the settings file holding those rules cannot be read\n\nIt also gains a file upload action with permission checks and size limits.\n\n**Why**\n\nTool calls made from another app can now follow the deny and ask rules set in the repository itself, not only the caller's own.\n\n- Area: MCP\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 3\/5\n- Scope: both\n- Heads-up: no"}