Deny and ask rules for MCP tools can now match more tools
A deny or ask permission rule matched against an MCP tool now also checks your other deny and ask rules and a related parent rule, so it can cover more tools
You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.310,
ImprovementsSection of the release
Unclear Exactly which additional MCP tools a given deny or ask rule now covers is not spelled out.
What
MCP (Model Context Protocol) is a way to connect Claude Code to tools from other programs and services. Permission rules decide whether Claude Code may use a tool on its own (allow), must stop (deny), or must ask you first (ask).
When a deny or ask rule is checked against an MCP tool, Claude Code now also tests it against your other deny and ask rules and against a parent rule derived from them. Before, a rule matched only by the tool's exact name, its family, an alias, or a wildcard pattern.
Why
A single deny or ask rule can now cover more MCP tools than before, so tools you meant to block or be asked about are more likely to be caught. If you rely on such rules, check that they do not now stop tools you wanted to allow.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtExactly which additional MCP tools a given deny or ask rule now covers is not spelled out.
