Unclear It is not stated which tools count as sending files to a connector.
A connector is an outside service, such as one linked from claude.ai, that Claude can use through tools. Claude Code now sends files to a connector only after you answer Claude Code's own permission prompt in a terminal.
The send is refused when it runs:
- in a background job
- in a nested session, which is a Claude Code session started inside another one
- in a teammate pane
It is also refused when the approval came from somewhere other than you at that prompt:
- a hook, which is a script you set up to run at certain points
- a plugin
- a permission mode that approves calls automatically
- an outside surface, such as another app
When a send is refused, Claude Code gives a reason, for example that you were not asked, that the request changed after it was approved, or that there is no prompt available where it ran.
Files cannot leave your machine for a connector without a person agreeing. Text that tricks the model, or a setting that approves everything, cannot get around that.
It is not stated which tools count as sending files to a connector.