[BUG] Claude does not respect permissions allowlist. It always asks for permissions when calling MCP tools

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

I am using a remote MCP called "Coda" and trying to allowlist it to run everytime without asking for permission.

I added various rules to try to get it to match via /permissions

• mcp_Coda__*
• Coda*
• Coda - *

I asked claude to edit these too. I can see the rules added to my user rules. But they just don't apply.

Here's what claude said:
This seems like a bug in Claude Code's glob pattern matching for tool permissions - the wildcard
isn't matching properly with spaces/dashes in tool names. You might want to report this at
https://github.com/anthropics/claude-code/issues

What Should Happen?

I shouldn't have to provide permission every time. It makes using claude code basically useless and I prefer to revert to Cursor where there's a simple UI to manage the allowlist.

Error Messages/Logs

Steps to Reproduce

1. Add a remote MCP server to claude
2. Type /permissions
3. Add patterns to make it match all tools in the MCP
4. Try to use an MCP tool
5. Be sad as Claude forgets what you just did and then gives you bad advice about how to fix the problem

Claude Model

None

Is this a regression?

I don't know

Last Working Version

_No response_

Claude Code Version

2.0.64

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

Terminal.app (macOS)

Additional Information

_No response_