# Claude Code v2.1.259 发布：新增 managed MCP 服务器配置与无人值守权限模式

- 来源：Claude Code：GitHub Releases（RSS）
- 作者：ashwin-ant
- 发布时间：2026-09-03 06:33
- AIHOT 分数：37
- AIHOT 链接：https://aihot.virxact.com/items/cmtkqa18m020froalmj0e42ol
- 原文链接：https://github.com/anthropics/claude-code/releases/tag/v2.1.259

## AI 摘要

Claude Code 发布 v2.1.259。新增 managedMcpServers 托管设置供组织向所有用户提供 HTTP/SSE MCP 服务器，新增 --permission-prompts none 支持无人值守 headless 场景下自动拒绝权限请求，并支持 GitLab MR（glab）命令识别与 claude plugin validate -- 输出。

## 正文

What's changed

Added managedMcpServers managed setting: organizations can provide HTTP/SSE MCP servers to every user (same entry shape as .mcp.json); entries that name a command to run are skipped

Added --permission-prompts none for unattended headless hosts: anything that would prompt is denied automatically while the active permission mode (including auto mode) keeps deciding

Added recognition of glab mr create/merge/close/reopen/note/update so GitLab merge requests show as MR !N in the collapsed tool summary and refresh the footer MR badge

Added --json to claude plugin validate for a machine-readable validation report

Fixed concurrent sessions silently reverting each other's ~/.claude.json changes — workspace trust no longer resets and MCP/project state is no longer lost when running many sessions at once

Fixed a conversation whose thinking was rejected once being rejected again on every later turn

Fixed Bash Read() deny rules not covering files given as option values (--ignore-revs-file=.env, -f.env, @file), git diff/git grep file operands, or cd DIR && cat FILE compounds; grep -r/cp -r over a directory holding a denied file now asks

Fixed the prompt cache being invalidated when the OAuth token refreshed in sessions with telemetry disabled

Fixed fullscreen mode showing a blank conversation after a long turn with hundreds of tool calls

Fixed auto mode running a turn on a model it doesn't support when a command or skill's frontmatter model: named one; the turn now keeps the session model

Fixed CLAUDE_CODE_MAX_CONTEXT_TOKENS being ignored for Vertex-style model IDs (@YYYYMMDD suffix) of model versions Claude Code doesn't recognize

Fixed the live output preview of a running shell command hiding its newest lines when an earlier line wrapped

Fixed a background GitHub connection check that ran on every launch for claude.ai users; the result is now remembered across launches

Fixed --resume failing (and --continue opening an empty conversation) when a saved session contains an attachment entry with no payload

Fixed frontmatter model: on custom commands and skills being ignored in interactive sessions

Fixed Artifact publishing failing once with an "unexpected parameter note" error in conversations continued from an older version

Fixed managed forceRemoteSettingsRefresh being ignored at startup when a policy helper configured by MDM or the managed settings file had already run

Fixed worktree isolation refusing hook-created worktrees on machines where git rev-parse fails with a message other than "not a git repository"

Fixed OpenTelemetry metrics and events from cloud sessions missing the user.email, organization.id, and user.account_uuid attributes

Fixed MCP servers that disconnect while their tools are being listed at startup showing as connected with no tools instead of reporting the error

Fixed the file edit permission dialog sometimes showing a changed line cut short with no indication

Fixed repository detection dropping a known repo identity after a transient git probe failure

Fixed managed settings silently going unenforced when the managed-settings file, a drop-in, the MDM plist, or the HKLM value cannot be parsed: Claude Code now refuses to start and names the source

Fixed Stop not actually stopping background agents and workflows in remote-control sessions: killed tasks now stay visible and re-stoppable until their processes exit

Fixed resuming a workflow run while its previous stopped run was still exiting, which could run duplicate copies of its agents

Fixed marketplace repo URLs on github.com with a trailing slash or dangling ?/# producing an unusable .git clone URL

Fixed blocking Stop hooks causing the turn after a block to lose the model's reasoning from that turn and, on some models, miss the prompt cache

Fixed remote (claude.ai) sessions taking 60 seconds to start a turn after a browser-hosted MCP server's page had gone away

Fixed worktree-isolated sessions refusing common Bash loops, xargs pipelines and launcher-wrapped commands that cannot reach the main checkout

Improved terminal resize and first-render performance for long responses by reusing text measurements

Improved /workflows agent detail: JSON outcomes are pretty-printed with syntax colors and real line breaks, and long outcomes fold behind an expand toggle

Improved headless/SDK session start: the first turn begins up to 50 ms sooner when MCP servers finish connecting

Improved /install-github-app to explain it is GitHub-only and point to the GitLab CI/CD docs when run inside a GitLab repository

Improved nested background subagent results to be saved in the parent subagent's transcript, so resumed subagents keep them and shared transcripts show the delivery

Changed allowedMcpServers to govern only servers users add: a literal managed-mcp.json server your allowlist used to filter out now loads on upgrade; use deniedMcpServers to keep it off

[VSCode] Added an Active quick filter and a status filter menu (Needs input, Working, Completed) to the session list sidebar

Fixed remote and scheduled sessions doing nothing after a connector-tool permission prompt was approved while the session was paused