{"version":"2.1.323","anchor":"mcp-oauth-callback-url-tool-requires-approval-and-refuses-pa","canonical_anchor":"mcp-oauth-callback-url-tool-requires-approval-and-refuses-pa","heading":"Finishing an MCP sign-in from a pasted link now needs approval or \/mcp","tier":"notice","area":"MCP","scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323\/e\/mcp-oauth-callback-url-tool-requires-approval-and-refuses-pa","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323","markdown":"### Finishing an MCP sign-in from a pasted link now needs approval or \/mcp\n\nThe tool that completes MCP sign-in from a callback link now asks first, and refuses pasted links when it cannot ask\n\n**What**\n\nSome MCP servers, connections that give Claude extra tools, need you to sign in. A tool lets Claude finish that sign-in from the callback link (the address the browser lands on afterwards). It used to run without asking. Now:\n\n- When prompts are avoided, as in `dontAsk` mode, or the session is not interactive, a pasted link is refused and you are told to run `\/mcp` in the session's terminal and sign in there.\n\n- Otherwise Claude Code asks for permission, with No as the default and no option to always allow it.\n\n- The check that the link matches the sign-in that was started now happens before the tool runs.\n\nThe tool is controlled by a setting Claude Code receives from its server.\n\n**Why**\n\nClaude can no longer quietly finish a sign-in using a link it was given in the conversation.\n\n- Flag `tengu_cobalt_ferrule`: Not enough to say (read for one account on one subscription tier against v2.1.323; this account: no value returned, anonymous baseline: no value returned, compiled default: off) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: MCP\n- Names: `\/mcp`\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 1\/5\n- Scope: individual\n- Heads-up: yes"}