Claude Code 2.1.274 fixes six MCP failure modes that silently break production tool sessions, adds store.connect_timeout_seconds and CLAUDE_CODE_GATEWAY_DRAIN_TIMEOUT_MS to the Claude apps gateway, and makes corrupted transcripts self-heal instead of looping forever.
Claude Code 2.1.259 ships managedMcpServers for org-wide HTTP/SSE MCP rollout, breaks the allowedMcpServers filter for managed entries, and fixes a concurrent-session bug that was silently corrupting workspace trust and MCP state in multi-agent CI runs.
Anthropic Model Hardware Standard turns lab devices into discoverable agent tools. For operators, the critical work is routing authority, safety limits, and audit paths before code touches hardware.
Version 2.1.233 adds forward_user_identity to surface per-developer identity through the apps gateway to any downstream proxy, fixes silent 400/413 swallowing on Vertex, Foundry, and AWS, and closes an infinite-reconnect loop in MCP v2 on serverless hosts.
Google expanded Gemini Managed Agents on July 7 with background execution and remote MCP server integration. Both updates change how operators design polling loops, timeout policies, and tool orchestration in production agent pipelines.
MCP 2026-07-28 removes session IDs and the initialize handshake. Sticky routing and shared session stores are no longer required. The new Mcp-Method header routes MCP traffic at the header layer — no JSON body inspection needed.
Claude Code Artifacts can now pull live data through each viewer's own MCP connectors — not the creator's. That inversion changes how teams build shared internal dashboards, who owns the credential chain, and what your AI gateway must account for.
Version 2.1.212 adds configurable per-session limits on subagent spawns and WebSearch calls, auto-backgrounds long MCP tool calls, and restores prompt caching through custom API gateways and Bedrock/Vertex.
Anthropic moved MCP tunnel management from the Admin API to the Claude API on June 22. New beta header, new WIF scope, migration window open — here is what operators must update.
Cursor now lets admins configure Team MCP servers once and distribute them across cloud agents, IDE, and CLI — with org-group access control. Here's what centralized MCP governance means for operators managing coding agent tool routing at scale.
Grok Build 0.2.66 upgrades its sandbox with glob-pattern deny lists and kernel-level filesystem protection for custom profiles, while adding MCP server auto-recovery — three changes that operators routing Grok Build in production must audit before deployment.
Mistral shipped workspace-scoped, tool-level MCP connector governance to GA. Here is what operators need to understand about scoped API keys, per-tool controls, and what this means for AI gateway routing policy.
OpenAI Codex 0.142.2 makes MCP tools use tool search by default when supported. For operator teams, tool discovery becomes a routing, audit, and provider-compatibility decision rather than a local client convenience.
Claude Code MCP reliability routing gets a practical v2.1.191 upgrade: retries, headless OAuth, durable settings refresh, and sandbox host memory now belong in operator policy.
Cursor 3.9 unifies plugins, skills, MCPs, subagents, rules, and hooks into a single Customize page with user, team, and workspace scoping — and team marketplaces now import from GitLab, Bitbucket, and Azure DevOps.
F5's new AI Security Platform adds network-based shadow AI discovery and MCP server connection tracing — closing the visibility gap that routing-layer operators have been managing with custom logging.
Envoy AI Gateway v0.7.0 ships hostname-based model catalog isolation for multi-tenant deployments, Anthropic-to-Bedrock protocol translation, and quota-aware rate limiting — a blueprint for how production AI routing infrastructure is evolving.
Claude Code 2.1.183 tightens auto mode safety by blocking destructive git and infrastructure commands unless explicitly requested, closes a webhook trigger approval bypass, and fixes MCP auth stub exposure in headless mode.
Claude Code 2.1.177 changelog: stdio MCP calls hang when claude -p loads a full fleet, CLAUDE_CODE_OAUTH_TOKEN is shadowed by stale on-disk credentials causing 401s, /compact is forwarded as plain text, and the Windows build cannot launch. Fleet pin and fix guide.
Moonshot AI released Kimi K2.7 Code on June 12. The Kimi K2.7 Code API enforces thinking mode exclusively — disabling it returns an API error — which changes cost modeling, routing policy, and fallback logic for teams using coding agents.
Claude Code's June 8 release adds --safe-mode, fixes slow claude -p / --print runs on Windows, hardens managed settings MCP policy enforcement, and restores a 5-minute Vertex / Foundry idle timeout.
Codex rust-v0.138.0: .mcp.json plugin automation, MCP OAuth pre-refresh, and /app desktop handoff for macOS/Windows fleets.
Claude Code MCP timeout and WebFetch policy changed in the June 3 release: explicit WebFetch deny rules now beat preapproved hosts, while sub-1000 ms MCP timeout values fall back to MCP_TOOL_TIMEOUT/default instead of tripping the watchdog.
Anthropic has acquired Stainless, the company that generates every official Claude SDK and MCP server tooling. For teams building multi-provider API pipelines, this reshapes SDK dependency risk, MCP server governance, and the pace of Claude API surface changes.
Anthropic's Managed Agents now lets teams run tool execution in their own infrastructure while keeping orchestration on Anthropic's side. Here's what that split-plane model means for routing, compliance, and private MCP access.
