You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.323,
ImprovementsSection of the release
What
Before Claude uses a tool, such as running a command, Claude Code may ask your permission. Auto mode decides some of these for you. This release changes how those asks work:
Organization limits: the old check looked at whether an MCP server's effectiveMaxPermission was "ask". MCP servers are add-ons that give Claude extra tools. The new check stops early when the ask carries an organization limit (orgLimit), so a ceiling set by your organization still forces a prompt.
Your feedback on a denial: when you reject a tool call, the text you typed can now be carried in the deny result as userFeedback. Before, deny results had no such field.
Consent words: some ask results, and the browser floor-block code, now clear consentWordsOnRecord.
Why
Your organization's permission limits keep producing a prompt even in auto mode. A reason you type when rejecting a tool call can now reach Claude.