{"version":"2.1.318","anchor":"mcp-policy-asks-can-be-lifted-in-acceptedits-mode","canonical_anchor":"mcp-policy-asks-can-be-lifted-in-acceptedits-mode","heading":"Some MCP ask rules can be lifted in acceptEdits mode","tier":"notice","area":"Permissions","scope":"both","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.318\/e\/mcp-policy-asks-can-be-lifted-in-acceptedits-mode","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.318","markdown":"### Some MCP ask rules can be lifted in acceptEdits mode\n\nIn acceptEdits mode, Claude Code can lift policy rules that would ask before using an MCP tool, unless `CLAUDE_CODE_EVAL_CONFINED` is set\n\n**Unclear.** It is not clear which MCP ask rules are lifted, or whether this is active yet.\n\n**What**\n\nAn MCP tool comes from an MCP server, an outside program that gives Claude extra tools. Policy rules can say that Claude Code must ask you before using such a tool. In the acceptEdits permission mode, which lets Claude edit files without asking each time, Claude Code can now lift those ask rules. This covers rules from policy settings and from policy files.\n\nWhen an ask still applies, the message reads that Claude requested permissions to use the tool, but you haven't granted it yet. Setting the environment variable `CLAUDE_CODE_EVAL_CONFINED` stops the asks from being lifted.\n\n**Why**\n\nIn acceptEdits mode you may see fewer permission prompts for MCP tools. If you want those prompts kept, `CLAUDE_CODE_EVAL_CONFINED` keeps them.\n\n- Area: Permissions\n- Names: `acceptEdits`\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 3\/5\n- Scope: both\n- Heads-up: yes"}