[BUG] MCP tools bypass permission prompts on Max account - affects Desktop/Web but not CLI

## Environment

• Platform (select one):
• [ ] Anthropic API
• [ ] AWS Bedrock
• [ ] Google Vertex AI
• [x] Other: Claude Desktop & Web Interface
• Claude CLI version: 1.0.74 (Claude Code) - works correctly
• Operating System: Windows 11
• Terminal: PowerShell / Command Prompt

## Bug Description
All MCP server tools bypass permission prompts and execute automatically on my personal Max plan account. This affects Claude Desktop and web interface (claude.ai) but NOT Claude Code CLI, which
correctly shows permission prompts. Issue started approximately 1-2 days ago.

## Steps to Reproduce

1. Configure any MCP tool (JIRA connector, Windows MCP, Context7, Supabase, etc.)
2. Set permissions to "Always ask permission" in settings
3. Use the tool in Claude Desktop or web interface
4. Tool executes immediately without any permission prompt

## Expected Behavior

• MCP tools should display permission prompt before execution
• User should approve/deny each tool use
• "Always ask permission" setting should be respected

## Actual Behavior

• ALL MCP tools execute immediately without prompts (JIRA, Windows MCP, Context7, Supabase)
• Happens regardless of configuration method (claude_desktop_config.json or web/desktop connectors)
• Affects both Claude Desktop app and claude.ai web interface
• Claude Code CLI (v1.0.74) DOES show permission prompts correctly
• Issue follows my account to any device/browser

## Additional Context

• Personal account on Max plan
• Created test account - permission prompts work correctly on same computer with same MCP configs
• Issue is clearly account-level, not local configuration
• Started 1-2 days ago (around January 10-11, 2025)
• May have applied for beta programs (unsure if approved)
• Account possibly associated with org ID: 8a51280c-595c-45c1-930d-4f7cfb9af8ed

Troubleshooting attempted:

• Cleared all cache
• Signed out of all devices
• Reset computer
• Tested on multiple computers
• Deleted and re-added tools
• All permission settings confirmed as "Always ask permission"

Already contacted support@anthropic.com, awaiting response.

This is a security concern as it removes user control over potentially sensitive tool operations. The fact that CLI respects permissions but Desktop/Web don't suggests an account flag issue.