{"version":"2.1.323","anchor":"auto-mode-permission-mcp-app-opener-tools-now-force-an-ask","canonical_anchor":"auto-mode-permission-mcp-app-opener-tools-now-force-an-ask","heading":"Auto mode now asks before running MCP tools that open apps","tier":"notice","area":"Auto Mode","scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323\/e\/auto-mode-permission-mcp-app-opener-tools-now-force-an-ask","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323","markdown":"### Auto mode now asks before running MCP tools that open apps\n\nIn auto mode, MCP tools that open apps now fall back to asking for your permission\n\n**Unclear.** Which MCP tools count as app openers is not shown.\n\n**What**\n\nIn auto mode, Claude Code decides on its own whether a tool may run. For MCP tools that open apps, it now sets a minimum of asking you first. MCP tools come from outside servers Claude Code connects to. Before, only hooks could set this minimum.\n\n**Why**\n\nAuto mode will not run app-opening MCP tools without asking.\n\n- Area: Auto Mode\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5\n- Scope: individual\n- Heads-up: yes"}