Follow Discord
Sweep 23 Oct 2026 · 21:48Z Build v2.1.310 529 read Stable v2.1.308 Latest v2.1.310 Next v2.1.310 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeReleasesv2.1.310entry #104

Claude Code v2.1.310 ·

MCP server allow and deny lists check a second form of the server address

For some kinds of configuration, the allow and deny lists for MCP servers now match against a second worked-out form of the command or URL

You'll notice Improvements
JSON All of v2.1.310
You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
MCPArea: what it touches
ImprovementsKind: in v2.1.310,
ImprovementsSection of the release

Unclear It is not clear which kinds of server configuration get the second check or how the second form differs from the first.

What

Organizations can control which MCP servers people may add with allowedMcpServers and deniedMcpServers. MCP servers are outside tools Claude Code connects to. To check a server against these lists, Claude Code works out the server's full command or web address. For certain kinds of server configuration, it now works this out a second time in a different way, and a match on either result counts.

Why

This affects which MCP servers an organization's policy lets through or blocks, so it matters to anyone relying on these lists for security.

Read from
Names in the bundleallowedMcpServersdeniedMcpServers
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not clear which kinds of server configuration get the second check or how the second form differs from the first.

See this entry in the whole of v2.1.310 →

Feedback