What
The Artifacts tool is provided through MCP (Model Context Protocol, the way Claude Code connects to extra tool servers). How Claude Code sets it up and checks publishing has changed:
- It can now run the tool from a local server on your machine instead of Anthropic's web endpoint, and passes it the directories your Read permission rules cover.
- Setting the environment variable
CLAUDE_CODE_HOST_GUARDS_ARTIFACTS_MCPlets sessions running inside the desktop app keep the tool instead of skipping it, as they did before. - The tool is now skipped for a desktop share action, in place of the old skip for evaluation runs.
- Publishing files is refused when one of your Read rules forbids reading a file being sent.
- In Cowork, a publish that would need an approval card is refused, because no one there can answer the card.
Why
This changes whether desktop and Cowork sessions get the Artifacts tool, and makes publishing respect the same Read rules as the rest of Claude Code.