Claude Code v2.1.317 adds email-exfiltration confirmation and gateway cost report API
ashwin-ant · ghdev · 2026-11-03
Claude Code v2.1.317 ships several security and enterprise-focused changes:
- Privacy: a confirmation now appears before web/shell tool calls send your account email to the network.
- Agent SDK: hook callbacks gain onFailure: "block", so a failing callback blocks the action instead of letting it run.
- Enterprise: the Claude apps gateway admin API adds a cost report (GET /v1/organizations/analytics/cost) with spend by total, per developer, per day, or per IdP group, backed by a daily record of each developer's IdP groups.
- Observability: OTel metrics/events/spans now include anthropic.plan, anthropic.seattype, anthropic.provider, and anthropic.custombaseurl.
- Fixes: MCP servers disconnecting after the first turn, auto mode failing every turn behind a 403/422 gateway, claude auth status exiting before token refresh saves, and more.
More from coding & agent
- Direct Weight Editing via Codex+Astra Lifts Audio Classifier Accuracy From 84.3% to 88.75% Without Retraining — dansitu · 2026-11-03
- Honest Thumbnails: Chrome extension swaps YouTube clickbait covers for real video frames — jdjohnson · 2026-11-03
- TSFLab: A Self-Improving Agent-Agnostic Workbench for Time Series Forecasting — D2I-Group · 2026-11-03
- Letting Codex+Astra agents reproduce and fine-tune an Edge Impulse bird sound classifier — dansitu · 2026-11-03
- Mac screen annotation app adds an MCP server so Claude and Cursor can draw diagrams on screen — adibfhanna · 2026-11-03
- Five first-week blockers when wiring coding agents to an OpenAI-compatible backend — ObviousSpace8195 · 2026-11-03