{"version":"2.1.318","anchor":"mcp-connector-card-allow-rules-and-ask-rule-enforcement","canonical_anchor":"mcp-connector-card-allow-rules-and-ask-rule-enforcement","heading":"Connector tools allowed from a card are honoured in session permissions","tier":"notice","area":"Permissions","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.318\/e\/mcp-connector-card-allow-rules-and-ask-rule-enforcement","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.318","markdown":"### Connector tools allowed from a card are honoured in session permissions\n\nA new connectorCardAllows permission state lets connector tools allowed from a card run for the session unless destructive, with a new MCP ask-rule step\n\n**Unclear.** It is not clear whether this is switched on for users or where a connector card appears.\n\n**What**\n\nConnectors are MCP servers, outside services that give Claude tools. Permission rules decide which tools may run without asking you. This release adds a new piece of permission state:\n\n- `connectorCardAllows`: a new field in the permission state. It is not saved between sessions (`not_serialized`), and it is cleared when command rules are stripped.\n\n- Allowed from a card: connector tools allowed from a card are honoured in the session's rules, unless the tool is destructive. Permission answers sent back by apps built on the SDK update this allowance.\n\n- Ask rules: the permission check gains a step for ask rules that are specific to MCP tools.\n\n- Poll events: one check that delivers poll events now also requires `connectorCardAllows` to be unset.\n\nOne finding also noted a new startup timing checkpoint, `remote_mcp_servers_search`, and a new `bashTeachesHeredocOnStdin` field among the agent tooling flags.\n\n**Why**\n\nThis changes when you see permission prompts for connector tools. A tool you allowed from a card can run for the rest of the session without asking again. Tools that are destructive are still not allowed this way.\n\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 3\/5\n- Scope: individual\n- Heads-up: no"}