Unclear It is not clear whether launch-time rules from sources other than CLAUDE_CODE_MCP_SERVE_SETTINGS are covered too.
What
Permission rules decide what Claude Code may do without asking. A deny rule blocks an action and an ask rule makes Claude Code ask first. Deny or ask rules supplied at launch through CLAUDE_CODE_MCP_SERVE_SETTINGS that begin with ! are now dropped, and Claude Code shows a warning.
A rule starting with ! removes paths from the rules listed before it instead of restricting anything. That would include the rules of the session that launched Claude Code.
Why
This closes a way for launch settings to quietly widen access, by undoing restrictions the calling session had set.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not clear whether launch-time rules from sources other than `CLAUDE_CODE_MCP_SERVE_SETTINGS` are covered too.