What
MCP servers are outside programs that give Claude extra tools. Claude Code has a check that decides whether an MCP server may record an owner using an older, legacy kind of key. That check was reworked:
- The legacy-key owner setup now receives an
enforcesGrantsvalue. It is read from a server-controlled switch with a fallback of false, so it is treated as off unless the server turns it on. Before, the setup received only read and claim. - The ownership check now tracks
claimedMayNotOwn, and it requiresenforcesGrants, or a fallback check, before it records a refusal. Before, it usedrefusedLegacyKeysand a single check. - The helper that decides whether to deny now looks at the server's identity, not only its name.
Why
This changes which MCP servers are refused when they use legacy ownership keys. The stricter handling depends on a switch the server controls, so it may not apply to every account.