Tip: Enterprise MCP Allowlists Now Enforce on Reconnect and IDE-Typed Configs in Claude Code
Claude Code Changelog·medium signal
A v2.1 fix closed gaps where managed `allowedMcpServers`/`deniedMcpServers` policies were skipped on server reconnect, for IDE-typed configs, for `--mcp-config` servers during the first post-install session, and before remote settings finished loading. If you manage MCP access org-wide, this removes a window where a denied server could still connect — worth confirming your policy actually holds on reconnect after upgrading.