Follow Discord
Sweep 03 Nov 2026 · 22:27Z Build v2.1.318 536 read Stable v2.1.311 Latest v2.1.318 Next v2.1.318 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeReleasesv2.1.318entry #49

Claude Code v2.1.318 ·

The permission prompt for MCP tools that can send your files elsewhere was reworked

Claude Code's check that asks before an MCP tool sends session files elsewhere moved into new logic, with a separate check for unasked turns

Group of 2 You'll notice Improvements
JSON All of v2.1.318
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
MCPArea: what it touches
ImprovementsKind: in v2.1.318,
ImprovementsSection of the release

Unclear Which MCP servers' tools count as able to send session files elsewhere is not stated.

What

MCP servers are outside programs that give Claude extra tools. Some of those tools can send files from your session somewhere else. Claude Code asks you before using them, with a message like "can send this session's files elsewhere, so Claude asks before using it. Allow it if you expected this."

  • The function that held this check before now holds something else: a check for whether a hook's attachment should be shown. A hook is a command you configure to run at set points.
  • The same ask now appears in new permission logic that wraps MCP tools able to send session files elsewhere.
  • The new logic has a separate check for turns where you were not asked (mcp_unasked_turn).
  • File delivery is controlled by two remote switches, tengu_walnut_tiller and tengu_sprightly_orbit.
  • In readings taken before this release, Anthropic's servers returned tengu_walnut_tiller on for this site's account and for a signed-out baseline. No reading has been taken under this release. Nothing has been read about tengu_sprightly_orbit.

Why

The ask before an MCP tool moves your files appears to have been moved rather than removed. The agent that found the new logic expects tools that move files to ask for permission more often. Watch for these prompts if you use MCP tools that upload or deliver files.

Read from
Feature flag
tengu_walnut_tiller On for this account, and not off by default

The flag server returned on for the one account this site reads, and nothing in this release compiles it off by default. The compiled default is shown below, and says which it is when we cannot read one: a fifth of gates compile in a string or a number rather than on or off, and most published releases have no gate table behind them at all. No client can see what the server returns for your account.

This account: on · anonymous baseline: on · compiled default in v2.1.318: on

These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.

tengu_sprightly_orbit Not enough to say

Nothing here resolved what this flag was doing on this version, so nothing here should be read as on or off.

This account: no value returned · anonymous baseline: no value returned · compiled default in v2.1.318: on

These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.

Read once, for one account on one subscription tier, against v2.1.318. It isn't a statement about your account. What a flag value here can and cannot tell you

How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtWhich MCP servers' tools count as able to send session files elsewhere is not stated.
The name it cites is new in this buildNew in this build: tengu_sprightly_orbit

See this entry in the whole of v2.1.318 →

Feedback