{"version":"2.1.309","anchor":"permission-prompt-tool-refused-for-mcp-servers-named-like","canonical_anchor":"permission-prompt-tool-refused-for-mcp-servers-named-like","heading":"--permission-prompt-tool refuses tools from MCP servers named like claude.ai connectors","tier":"notice","area":"Permissions","scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.309\/e\/permission-prompt-tool-refused-for-mcp-servers-named-like","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.309","markdown":"### --permission-prompt-tool refuses tools from MCP servers named like claude.ai connectors\n\n--permission-prompt-tool can no longer approve tools from an MCP server whose name starts like a claude.ai connector's; the server needs another name\n\n**Unclear.** The exact name pattern that counts as looking like a claude.ai connector is not stated.\n\n**What**\n\n`--permission-prompt-tool` is a command-line option. It names an MCP tool that answers permission prompts when Claude Code runs without a person at the keyboard. MCP (Model Context Protocol) is the standard Claude Code uses to talk to external tool servers.\n\nUntil now, Claude Code overrode that tool's answer in only one case: tools that require user interaction. This release adds a second case:\n\n- Tools from an MCP server whose name starts like a claude.ai connector's name. An \"allow\" answer from the prompt tool is now turned into a deny for these tools.\n\n- The deny has its own explanation: \"This MCP server's name starts like a claude.ai connector's, so --permission-prompt-tool cannot approve its tools. To use them here, the server needs another name.\"\n\n- The existing deny for tools that require user interaction (\"MCP tool requires user interaction; not supported via --permission-prompt-tool\") is unchanged.\n\n**Why**\n\nSome scripts rely on a prompt tool to approve calls automatically. If yours approves tools from a server with a name like this, those calls will now be refused. The message tells you why, and renaming the server lets its tools be approved again.\n\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5\n- Scope: individual\n- Heads-up: yes"}