[BUG] All Claude in Chrome MCP page-content tools blocked — permission_required / Navigation not allowed, approval UI never renders (related: #53630, #57219)

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

All Claude in Chrome MCP page-content tools (navigate, get_page_text, read_page, computer/screenshot, javascript_tool) return permission errors on every domain. The domain approval UI never appears. Meta-tools (list_connected_browsers, tabs_context_mcp) work fine. This affects ALL domains including google.com — it is not domain-specific.

What Should Happen?

MCP tools should either (a) prompt for domain approval and allow access after approval, or (b) respect the org-level "Allow extension on all sites" setting and work without per-domain approval.

Error Messages/Logs

navigate → "Navigation to this domain is not allowed"
get_page_text → "Permission denied for reading page content on this domain"
computer (screenshot) → "Permission denied for this action on this domain"

~/.claude/policy-limits.json contains:
{"restrictions":{"allow_quick_web_setup":{"allowed":false},"enforce_web_search_mcp_isolation":{"allowed":false}}}
This file is written by Claude Desktop on every startup and reverts if changed manually.

Steps to Reproduce

1. Fresh install of Claude Desktop + Claude in Chrome extension on Windows
2. Pair extension via Claude Desktop
3. Confirm bridge-state.json shows enabled:true, userConsented:true
4. Confirm org settings: Claude in Chrome enabled, "Allow extension" on all sites
5. From Claude Code, call mcp__Claude_in_Chrome__navigate with any URL
6. Error: "Navigation to this domain is not allowed" — no approval card appears

Claude Model

Sonnet (default)

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

1.8555.1

Platform

Anthropic API

Operating System

Windows

Terminal/Shell

Terminal.app (macOS)

Additional Information

_No response_