[BUG] reporting.xero.com blocked by Claude in Chrome MCP — "Navigation to this domain is not allowed

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

When Claude attempts to navigate to reporting.xero.com via the mcp__Claude_in_Chrome__navigate tool, it returns the error:

Navigation to this domain is not allowed

This occurs even when:

Chrome extension Site Access is set to "On all sites"
mcp__Claude_in_Chrome__navigate is explicitly listed in settings.local.json permissions (no domain qualifier)
The user has manually navigated to reporting.xero.com in the same browser session
Impact: reporting.xero.com is Xero's reporting subdomain, used for Account Transactions, Balance Sheet, and Profit & Loss reports. These are core to accounting workflows. The main Xero app (go.xero.com) works fine — only the reporting subdomain is blocked.

What Should Happen?

Claude in Chrome should be able to navigate to, read, and interact with reporting.xero.com in the same way it can with go.xero.com. The tool should not block subdomains of approved sites unless there is a specific security reason, and if a domain is blocked it should be documented so users know in advance.

Error Messages/Logs

Navigation to this domain is not allowed

This error is returned directly by the mcp__Claude_in_Chrome__navigate tool when attempting to navigate to any URL on reporting.xero.com. No further detail is provided in the error.

Steps to Reproduce

Open Claude Code with Claude in Chrome extension enabled (v1.0.68)
In a Claude session, ask Claude to navigate to reporting.xero.com (e.g. "go to the Account Transactions report in Xero")
Claude calls mcp__Claude_in_Chrome__navigate with URL reporting.xero.com/[any path]
Tool immediately returns: Navigation to this domain is not allowed
Note: go.xero.com navigates successfully in the same session. The block appears to be specific to the reporting.xero.com subdomain.

Claude Model

Sonnet (default)

Is this a regression?

Yes, this worked in a previous version

Last Working Version

v1.0.67 — navigation to reporting.xero.com worked correctly in the previous version. The block appears to have been introduced in v1.0.68.

Claude Code Version

Claude Code 2.1.109

Platform

Anthropic API

Operating System

Windows

Terminal/Shell

Windows Terminal

Additional Information

_No response_