{"version":"2.1.307","anchor":"server-side-permission-classifier-mcp-allow-rules-exact-fie","canonical_anchor":"auto-mode-filters-mcp-allow-rules-and-caps-the-allow-rule-li","heading":"Auto mode filters MCP allow rules and caps the allow-rule list","tier":"internal","area":"Auto Mode","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.307\/e\/server-side-permission-classifier-mcp-allow-rules-exact-fie","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.307","markdown":"### Auto mode filters MCP allow rules and caps the allow-rule list\n\nAuto mode now trims MCP tool allow rules, removes duplicates and caps the list before sending it to the permission classifier\n\n**Unclear.** What makes Claude Code send this value, and how it changes matching of MCP allow rules, is not stated.\n\n**What**\n\nAuto mode lets Claude Code decide on its own whether to run a tool, using a classifier, a server-side check that judges each action. Allow rules are permissions you have set that pre-approve certain tools. MCP tools are tools supplied by outside servers you connect to Claude Code.\n\n- Auto mode now drops bare MCP tool allow rules that would not be auto-approved anyway.\n\n- It removes duplicate allow rules and caps how many are sent.\n\n- When filtering succeeds, it sends a new optional true-or-false field, `mcp_allow_rules_exact`, to the classifier. The field is sent only when true.\n\n- If filtering fails, the rules are sent unfiltered and without `mcp_allow_rules_exact`, and a message says so.\n\n- Claude Code's internal report of incomplete auto mode context now also counts allow rules: the total, repeats, distinct rules and the cap.\n\n**Why**\n\nThe classifier receives a shorter, cleaner list of rules. MCP allow rules may be matched differently as a result, so watch whether MCP tools you rely on are approved as before.\n\n- Area: Auto Mode\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 2\/5\n- Scope: individual\n- Heads-up: no"}