You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
MCPArea: what it touches
ImprovementsKind: in v2.1.311,
ImprovementsSection of the release
What
MCP servers are outside tools Claude Code connects to. When it reaches one through a proxy (a go-between server set with HTTPS_PROXY), it can use a file of trusted certificates named by SSL_CERT_FILE.
Claude Code now first works out whether a proxy applies to the address. It reads the SSL_CERT_FILE bundle only if one does. Before, it read the file whenever HTTPS_PROXY was set.
Why
Addresses you exclude from the proxy with NO_PROXY no longer cause the certificate file to be read.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed sinceAnthropic's documentation has since written up HTTPS_PROXY, on Configuration reference.> On macOS and Windows the Cowork workspace VM is handed a copy of the script when it starts and evaluates it for each request itself; there `myIpAddress()` returns the VM's internal address rather than the device's, so a script that choos…third-party/claude-desktop/configurationsee the edit
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agreesAnthropic's documentation has since written up HTTPS_PROXY, on Configuration reference.