Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeReleasesv2.1.309entry #50

Claude Code v2.1.309 ·

Plugins can only tighten permission for cloud browser calls

Plugins can now only make cloud browser calls stricter, and some MCP tool asks keep their safety prompt and default to No

You'll notice Improvements
JSON All of v2.1.309
You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.309,
ImprovementsSection of the release

Unclear When the host-card denial in bypassPermissions mode applies is not clear.

What

Permission handling changed in three places:

  • A plugin can now only make a call to the cloud browser in remote sessions (CCR) stricter, never looser.
  • MCP tools whose strictest allowed setting is to ask now keep a safety check that only a person can answer, along with the defaultToNo setting, so the prompt starts on No.
  • In bypassPermissions mode, where Claude Code normally skips permission prompts, a new path can still deny a call on the host card.
Why

These change how permission prompts behave for the cloud browser and when permissions are bypassed. Some calls that used to go through may now be blocked or need a person to approve them.

How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtWhen the host-card denial in `bypassPermissions` mode applies is not clear.

See this entry in the whole of v2.1.309 →

Feedback