Claude Code v2.1.259 ships managed MCP servers, unattended permission mode and sandbox fixes
ashwin-ant · ghdev · 2026-09-03
Key changes
- New managedMcpServers setting: organizations can provision HTTP/SSE MCP servers to every user (same shape as .mcp.); command-based entries are skipped
- New --permission-prompts none flag for unattended headless hosts: anything that would prompt is auto-denied while the active permission mode (including auto mode) keeps deciding
- GitLab glab mr commands are now recognized and shown as MR !N in tool summaries
- claude plugin validate gains -- for machine-readable reports
Notable fixes
- Concurrent sessions no longer silently overwrite each other's /.claude. (workspace trust and MCP/project state preserved)
- Bash Read() deny-rule bypasses fixed: files passed as option values (-f.env, @file), git diff/git grep operands, or cd DIR && cat FILE compounds; grep -r/cp -r over directories with denied files now prompt
- Thinking rejected once no longer gets re-rejected every turn
- Prompt cache no longer invalidated by OAuth refresh with telemetry off
- Also fixes fullscreen blank screen after long turns, --resume failures, and a redundant GitHub connection check on every launch
More from coding & agent
- mcp-doctor: a static analysis linter for MCP servers that surfaced real bugs in 12 popular repos — Wide_Imagination_970 · 2026-09-03
- Stripe launches Directory preview to help AI agents find and use external providers — jeff_weinstein · 2026-09-03
- Akkru launches financial data MCP so AI agents can trace numbers back to filings — camiggggg · 2026-09-03
- Matt Shumer explains Fable's architecture: locked world structure lets versions share one world — mattshumer_ · 2026-09-03
- GLM-5.3-Flash priced at 0.06x: Factory confirms all-day droid usage without rate limits — matanSF · 2026-09-03
- Qwen 3.8 users report better results forcing reasoning effort to low, llama.cpp flag shared — Jorlen · 2026-09-03