Claude Code v2.1.259: Managed MCP Servers, Headless Permission Mode, and Concurrency Fixes

Claude Code v2.1.259 (released September 2) focuses on enterprise controls, unattended operation, and several concurrency bugs that could silently corrupt your local state. Here's what's actually useful.

Managed MCP servers for orgs

Organizations can now define managedMcpServers in managed settings. These entries use the same shape as .mcp.json, but point to HTTP/SSE servers that get rolled out to every user. Entries that name a command to run (like node server.js) are skipped — only remote servers are allowed.

Headless permission mode

Added --permission-prompts none for unattended hosts. Anything that would prompt is automatically denied while the active permission mode (including auto mode) keeps deciding. This is key for CI or cron jobs where a hanging prompt is unacceptable.

GitLab merge request recognition

Claude Code now recognizes glab mr create/merge/close/reopen/note/update commands. GitLab merge requests display as MR !N in the collapsed tool summary and refresh the footer MR badge.

Plugin validation in JSON

claude plugin validate now accepts --json to produce a machine-readable validation report — useful for pre-commit hooks or CI pipelines.

Key concurrency fixes

Multiple concurrent sessions were silently reverting each other's ~/.claude.json changes, causing workspace trust resets and lost MCP/project state. This is fixed. Also fixed: a conversation whose thinking was rejected once being rejected again on every later turn, and background agents in remote-control sessions not actually stopping when you hit Stop — killed tasks now stay visible and re-stoppable until their processes exit.

Bash safety gaps closed

Deny rules in Bash Read() now cover files given as option values (--ignore-revs-file=.env, -f.env, @file), file operands to git diff/git grep, and compounds like cd DIR && cat FILE. Recursive scans over directories containing denied files (grep -r, cp -r) now trigger prompts.

Other notable fixes

• Fixed prompt cache being invalidated on OAuth token refresh when telemetry is disabled.
• Fullscreen mode no longer shows a blank conversation after long turns with hundreds of tool calls.
• Auto mode no longer runs on a model it doesn't support if frontmatter model: names one; it keeps the session model.
• CLAUDE_CODE_MAX_CONTEXT_TOKENS is now respected for Vertex-style model IDs with @YYYYMMDD suffix.
• Fixed background GitHub connection check for claude.ai users — the result is now cached across launches.
• Fixed --resume failing when saved sessions contain attachment entries with no payload.
• Frontmatter model: on custom commands/skills now works in interactive sessions.
• Managed settings now refuse to start with an error naming the source (file, drop-in, MDM plist, HKLM) when parsing fails, instead of silently unenforced.
• Worktree isolation no longer blocks common Bash loops, xargs pipelines, or launcher-wrapped commands that can't reach the main checkout.
• OpenTelemetry metrics now correctly include user.email, organization.id, and user.account_uuid in cloud sessions.

Performance improvements

Terminal resize and first-render performance for long responses is improved by reusing text measurements. The /workflows agent detail view now pretty-prints JSON outcomes with syntax colors and real line breaks.

If you're running Claude Code in parallel sessions or managing it for a team, update now — the concurrency fixes alone are worth it.