[BUG]

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Bug Description
MCP tools always prompt for user permission even when explicitly added to allowedTools in settings. Neither wildcard patterns nor explicit tool names prevent the permission prompt.
Environment
Claude Code version: - 2.0.8

OS: Windows 11
MCP Server: blender-mcp (via uvx)
Configuration
.claude/mcp_settings.json:

{
"mcpServers": {
"blender": {
"command": "uvx",
"args": ["blender-mcp"],
"env": {}
}
}
}
.claude/settings.local.json (relevant portion):

{
"permissions": {
"allowedTools": [
"mcp__blender",
"mcp__blender__*",
"mcp__blender__get_scene_info",
"mcp__blender__execute_blender_code"
]
}
}
Steps to Reproduce
Configure an MCP server (e.g., blender-mcp)
Add MCP tools to allowedTools using any format:
Wildcard: "mcp__blender__*"
Explicit: "mcp__blender__get_scene_info"
Server-level: "mcp__blender"
Restart Claude Code
Ask Claude to call an MCP tool (e.g., "get the Blender scene info")
Expected Behavior
MCP tools listed in allowedTools should execute without prompting for permission, similar to how Bash tool patterns work (e.g., "Bash(git:*)" allows all git commands).
Actual Behavior
Every MCP tool call prompts for user permission, regardless of allowedTools configuration.

What Should Happen?

Blender MCP should run without prompting for approval each time.

Error Messages/Logs

Steps to Reproduce

Steps to Reproduce
Configure an MCP server (e.g., blender-mcp)
Add MCP tools to allowedTools using any format:
Wildcard: "mcp__blender__*"
Explicit: "mcp__blender__get_scene_info"
Server-level: "mcp__blender"
Restart Claude Code
Ask Claude to call an MCP tool (e.g., "get the Blender scene info")
Expected Behavior
MCP tools listed in allowedTools should execute without prompting for permission, similar to how Bash tool patterns work (e.g., "Bash(git:*)" allows all git commands).
Actual Behavior
Every MCP tool call prompts for user permission, regardless of allowedTools configuration.

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.0.8

Platform

Other

Operating System

Windows

Terminal/Shell

VS Code integrated terminal

Additional Information

_No response_