MCP connector tools fail with "requires approval" in routine remote execution sessions

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Routine is configured with Gmail and Google Drive connectors (both set to "Always allow"). In remote execution sessions (manually triggered), all MCP tool calls fail regardless of tool:
Streamable HTTP error: Error POSTing to endpoint: MCP tool call requires approval
Affected tools: mcp__Gmail__list_labels, mcp__Gmail__search_threads, mcp__Google-Drive__search_files — every Gmail/Drive call fails the same way.
What's working: Bash commands run fine. Slack (via bot token + Python script) works. Only MCP connector tools are blocked.
What's been tried:
Set connectors to "Always allow" in connector settings page
Added tool names to .claude/settings.json permissions allow list
Started 3 separate sessions — all fail identically
Connectors are properly added in the routine's Connectors tab

What Should Happen?

Connector tools should be usable in routine remote execution sessions without additional approval, per the routine config warning: "Claude can use all tools from these connectors — including writes — without asking for permission during runs."

Error Messages/Logs

Steps to Reproduce

Create a Claude Code routine on claude.ai with Gmail and Google Drive connectors added
Set connector permissions to "Always allow" on the connector settings page
Trigger the routine session (manually or via schedule)
Have Claude call any Gmail or Google Drive MCP tool (e.g. mcp__Gmail__list_labels, mcp__Gmail__search_threads, mcp__Google-Drive__search_files)
Observe error: Streamable HTTP error: Error POSTing to endpoint: MCP tool call requires approval
Expected: Tool executes without prompting, per the routine Connectors tab message: "Claude can use all tools from these connectors — including writes — without asking for permission during runs."
Actual: Every Gmail and Google Drive MCP call fails with the same error, regardless of which tool is called. Bash commands in the same session work fine. The issue persists across multiple session restarts.

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.1.146

Platform

Other

Operating System

Other Linux

Terminal/Shell

Other

Additional Information

_No response_