Claude Code v2.1.259 ships managed MCP servers, unattended permission mode and sandbox fixes
ashwin-ant · ghdev · 2026-09-03
Key changes
- New managedMcpServers setting: organizations can provision HTTP/SSE MCP servers to every user (same shape as .mcp.); command-based entries are skipped
- New --permission-prompts none flag for unattended headless hosts: anything that would prompt is auto-denied while the active permission mode (including auto mode) keeps deciding
- GitLab glab mr commands are now recognized and shown as MR !N in tool summaries
- claude plugin validate gains -- for machine-readable reports
Notable fixes
- Concurrent sessions no longer silently overwrite each other's /.claude. (workspace trust and MCP/project state preserved)
- Bash Read() deny-rule bypasses fixed: files passed as option values (-f.env, @file), git diff/git grep operands, or cd DIR && cat FILE compounds; grep -r/cp -r over directories with denied files now prompt
- Thinking rejected once no longer gets re-rejected every turn
- Prompt cache no longer invalidated by OAuth refresh with telemetry off
- Also fixes fullscreen blank screen after long turns, --resume failures, and a redundant GitHub connection check on every launch
More from coding & agent
- Open models below 4-bit struggle at self-iterating 3D asset generation, HF dev finds — mervenoyann · 2026-10-21
- Developer Moves AI Agents to a Dedicated Linux Workstation Using Incus System Containers — kevinkern · 2026-10-21
- Motion Launches a General Video Agent That Edits Footage and Mimics Any Reference Style — mhdfaran · 2026-10-21
- MCP Platform NitroStack Wins Product Hunt Product of the Day, Focuses on Retention — EstablishmentFun4373 · 2026-10-21
- CodeRabbit Ships 5,000 PRs a Week With a Tiny Team, Hires by Strategy-Game Hours — omojumiller · 2026-10-21
- LukeW maps the five UI problems every AI-native company faces with agents — LukeW · 2026-10-21