{"version":"2.1.321","anchor":"file-delivery-gate-logic-moved-into-a-shared-function","canonical_anchor":"file-delivery-gate-logic-moved-into-a-shared-function","heading":"Permission check for MCP tools that send session files is reworked","tier":"notice","area":"Permissions","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/file-delivery-gate-logic-moved-into-a-shared-function","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321","markdown":"### Permission check for MCP tools that send session files is reworked\n\nThe approval flow for MCP tools that deliver session files now reads connector details and can ask again after an upload expires\n\n**Unclear.** Which MCP servers this check applies to in practice is not clear, since it requires a specific server id.\n\n**What**\n\nThe permission check for MCP tools that can send files from your session elsewhere has been reworked. MCP tools come from outside programs that give Claude extra tools. The changes:\n\n- The remote switch that turns file delivery on is now checked in one shared place, which reports whether no switch is set or the feature is switched off.\n\n- The check now reads details a connector declares about itself, such as `anthropic\/readsOwnArtifactsOnly`, and a rule limiting access to the owner.\n\n- If an upload expires before it is used, Claude Code can ask for your approval again and retry.\n\nBoth remote switches involved fall back to on when Anthropic's servers send no value. The second, which still controls the check on where files can be delivered, read on for this site's account in readings taken before this release.\n\n**Why**\n\nThis is a sizeable change to how Claude Code asks before connector tools handle your files, and it is on unless switched off remotely. An expired upload now leads to a fresh approval request rather than a dead end.\n\n- Flag `tengu_sprightly_orbit`: Not enough to say (read for one account on one subscription tier against v2.1.321; this account: no value returned, anonymous baseline: no value returned, compiled default: on) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Flag `tengu_walnut_tiller`: On for this account, and not off by default (read for one account on one subscription tier against v2.1.321; this account: on, anonymous baseline: on, compiled default: on) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5\n- Scope: individual\n- Heads-up: no"}