{"version":"2.1.314","anchor":"new-per-tool-mcp-gate-tengu-deep-dusk-safe-mode-lookup-a","canonical_anchor":"new-per-tool-mcp-gate-tengu-deep-dusk-safe-mode-lookup-a","heading":"Some MCP tools can be treated as coming from the remote session, behind two switches","tier":"internal","area":"Permissions","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.314\/e\/new-per-tool-mcp-gate-tengu-deep-dusk-safe-mode-lookup-a","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.314","markdown":"### Some MCP tools can be treated as coming from the remote session, behind two switches\n\nClaude Code can now mark certain MCP tools as coming from the remote session when permissions are checked, controlled by two server switches\n\n**Unclear.** What marking a tool as coming from the remote session changes about its permission prompt is not stated.\n\n**What**\n\nMCP tools are tools supplied by outside servers. When Claude Code decides whether a tool call needs permission, it can now mark an MCP tool as coming from the remote session. A tool is marked this way when it passes a check and one of these holds:\n\n- its server is on a short list of allowed servers, and a first server switch is on\n\n- a second server switch is on, which is off unless it is switched on remotely\n\nIn readings taken before this release, the flag server returned on for the first switch, for this site's account and for the anonymous baseline.\n\n**Why**\n\nThis lets Anthropic change from the server how permissions for MCP tools are handled in remote sessions.\n\n- Flag `tengu_deep_dusk`: Gate removed from the code (read for one account on one subscription tier against v2.1.314; this account: on, anonymous baseline: on, compiled default: not a boolean we can read) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Flag `tengu_buzzing_pelican`: Not enough to say (read for one account on one subscription tier against v2.1.314; this account: no value returned, anonymous baseline: no value returned, compiled default: off) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Permissions\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 3\/5\n- Scope: individual\n- Heads-up: no"}