Unverified50% confidenceSolutionExact time
Under the hosted allowManagedPermissionRulesOnly policy, plugins from the marketplace, claude.ai, and npm can no longer pre-authorize their own tools via allowed-tools; only plugins from Anthropic official sources or sources guaranteed by managed settings retain this capability.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/28/2026
First Seen
Valid until: 12/27/2026
Sources
Related Entities
Related Claims
UnverifiedRefill tools are essentially a means of circumventing official usage restrictions and may violate Anthropic's terms of service.65% similarUnverifiedThe terms of service of some providers explicitly restrict proxy sharing and resale, and OmniRoute should not be used as a stable, unlimited free model pool.64% similarUnverifiedSource-available only means the code is available for review; the author may prohibit commercial use, forking, or restrict redistribution through a custom license, making it essentially still proprietary software.64% similarUnverified生产环境的主分支不应让AI代理随意写入，应通过Git分支保护规则限制代理写入目标63% similarUnverified在AI代理场景中实施最小权限的方式包括：通过Git分支保护规则限制写入目标、使用细粒度GitHub App权限而非个人访问令牌、在CI/CD流水线中分配独立受限服务账号63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/957227API
curl https://kongchang.com/api/v1/knowledge/claims/957227MCP
get_claim(id=957227)