GitHub (anthropics/claude-code) · Oct 23, 2026 · 5:25 AM

Claude Code 2.1.309 closes sandbox and MCP-config gaps and makes ultrareview ask for workspace trust

Released Oct 22, it stops sandboxed Bash from running shell startup files outside the sandbox, blocks sandboxed commands and auto-accepted edits from rewriting the --mcp-config file, and makes bypass-mode rm prompts in Desktop and VS Code deny at once so unattended sessions keep going. claude ultrareview now asks for workspace trust on a terminal and refuses otherwise, so scripts need --trust-workspace.

Read at github.com

Claude Code

An AI coding agent for terminal, IDE, web, and Slack

More news

View all

Zed 1.25.2 stops leaking remote agent and MCP secrets to your local process list

Released Oct 21, it fixes environment variables, including secrets, passed to external agents and MCP servers in remote projects showing up in the local machine's process list, and stops prompts to external agents stalling on needless Git checkpoints. It also adds context compaction and session notices for ACP agents, new Bedrock models, and binaries about 33% smaller on macOS…

Zed Releases 50 minutes ago

Causely's MCP server lands in the GitHub MCP Registry with built-in tool guidance and traceable agent actions

Announced Oct 22, the upgraded server at api.causely.app/mcp ships the guidance agents need to use its tools on first connection and ties every agent action back to the diagnosis and evidence behind it, for Claude Code, Cursor, Codex, and other MCP clients. Causely's own benchmark claims 48% fewer tokens and 63% faster answers, and background agent examples are open source at causely oss…

Causely Blog 3 hours ago

CodeFloe launches a hosted MCP server for repos, issues, PRs, and releases

Announced Oct 22, the Git host now runs an MCP server at https://mcp.codefloe.com/mcp that Claude Code, Codex, VS Code, or any MCP client can use to work with your repositories, issues, pull requests, releases, Pages, and CI quota. It authenticates with your own access token, so the agent can do only what that token's scopes allow…

CodeFloe Forum 4 hours ago

Hedera's hosted Network MCP lets Claude Code, Codex, and Cursor build testnet transactions you sign in your wallet

Add one URL ( https://agentic testnet mcp.hedera.com/mcp ) and sign in with a HashPack or Kabila wallet over OAuth, and your agent can transfer HBAR, mint tokens, deploy contracts, and post consensus messages, but the server holds no keys and every transaction waits for your wallet approval. It's testnet only, with no spend caps, so the wallet prompt is your only guardrail (CryptoCompass)…

Hedera Docs 5 hours ago

Qlik's MCP server lands in Claude's directory with governed data, lineage, and dashboard tools

Announced Oct 22, Claude users can now add Qlik from the Claude Directory to search Qlik Cloud apps and datasets, ask questions over governed data, trace lineage, and build sheets and charts by prompt, all under existing Qlik permissions via OAuth. Access needs the Qlik MCP: Allowed role permission (setup docs)…

GlobeNewswire (Qlik) 6 hours ago

Spotted something we missed? Start a thread.