Cloud sessions stop recording MCP server addresses that may hold secrets

In Anthropic cloud sessions (where CLAUDE_CODE_REMOTE is set), Claude Code records which MCP servers were set up at launch. MCP servers are outside tools Claude can connect to. Now:

• A server's address is no longer recorded when its headers hold values that look like credentials.
• Claude Code also records each server's origin, the scheme and host part of the address.
• Parts of an address that look secret, such as long unique IDs, sk- keys and mixed-case tokens, are detected.

Before, the full address was always recorded under the same conditions.