[BUG] Plugin subagent doesn't persist MCP permissions

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

I'm using the latest version of Cowork.

It seems the plugin subagent doesn't persist the granted MCP permission. I have to click "allow" in every new session. I always click "always allow", and the permission isn't persisted.

The problem is particularly bad when the subagent uses 10 different MCP tools.

What Should Happen?

Clicking "always allow" should persist the MCP permissions for the plugin subagent.

Error Messages/Logs

Steps to Reproduce

None

Claude Model

Sonnet (default)

Is this a regression?

No, this never worked

Last Working Version

_No response_

Claude Code Version

Cowork 1.12603.1

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

Terminal.app (macOS)

Additional Information

_No response_