You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
MCPArea: what it touches
ImprovementsKind: in v2.1.319,
ImprovementsSection of the release
What
OAuth is a standard way for one service to give another limited access without sharing a password. Some services, such as MCP servers, sign Claude Code in this way. MCP servers are outside tools that Claude Code can connect to. Claude Code renews the sign-in token from time to time. This renewal is called a refresh.
A refresh request no longer includes the scope value, which lists the permissions being asked for. Before, Claude Code sent the stored scope whenever it had one. The server now decides which permissions the refreshed token gets, using its own default.
Why
A refreshed token may now carry different permissions than before. Servers that rejected a refresh because it included a scope may now accept it.
