Unverified50% confidenceFactExact time
In the tested version Bionic 1.1.6, the 'always ask' setting in the approval menu only applies to shell commands and does not cover MCP tool calls.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/8/2026
First Seen
Valid until: 10/22/2026
Sources
Related Entities
Related Claims
UnverifiedAsk mode only provides answers to specific questions and will not proactively take over the coding process or batch-create files.56% similarUnverifiedv2.1.289 fixes a vulnerability in enterprise managed machine scenarios where, when nested portions of compound shell commands partially trigger deny/ask rules, those rules might fail to override user-installed mod approvals.55% similarUnverifiedWhen using MCP Shell to control system shell commands, you must strictly restrict permissions to only execute preset tasks, to avoid data loss caused by accidental operations.53% similarUnverifiedBefore the fix, recursive deletion commands like rm -rf "$(pwd)" whose targets came solely from command substitution output would execute silently without prompting in auto mode and --dangerously-skip-permissions mode; after the fix, the user will be actively asked even if a Bash allow rule exists, unless CLAUDE_CODE_DISABLE_SUBSTITUTION_RM_PROMPT=1 is set.52% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/988967API
curl https://kongchang.com/api/v1/knowledge/claims/988967MCP
get_claim(id=988967)