[BUG] Cloud routines (CCR) cannot use Slack MCP write tools — "Always allow" option unavailable

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

## Summary
(broke around June 19, 2026).

## Root cause identified
In claude.ai connector settings, write/delete tools (e.g. "Send a message", "Add reaction") are now fixed to "Requires
approval" and cannot be changed to "Always allow". Since cloud routines run autonomously with no human to approve,
Slack write tools are effectively unusable in scheduled routines.

## What worked before
Until ~June 18, 2026, the same routine successfully sent Slack DMs daily using
mcp__claude_ai_Slack__slack_send_message via the connected Slack MCP connector.

## Steps to reproduce

1. Create a cloud routine with Slack MCP connector attached
2. Set permitted_tools: ["mcp__claude_ai_Slack__slack_send_message"] in mcp_connections
3. Run the routine → agent reports Slack tools unavailable / requires approval

## Expected behavior
Write tools should be settable to "Always allow" for cloud routine use cases, or cloud routines should have a separate
auto-approval mechanism.

## Environment

• claude.ai cloud routine (CCR)
• Slack MCP connector (mcp.slack.com/mcp)
• connector_uuid: fa671ed0-5440-4698-a068-d69c2ba7eb25

What Should Happen?

Write/delete MCP tools (e.g. Slack "Send a message") should be configurable as "Always allow" so that cloud routines
can use them autonomously without requiring human approval each time.

Error Messages/Logs

Steps to Reproduce

1. Connect the Slack MCP connector at claude.ai/customize/connectors
2. Create a cloud routine (CCR) with the Slack MCP connector attached
3. Set permitted_tools: ["mcp__claude_ai_Slack__slack_send_message"] in mcp_connections
4. Check connector settings — write/delete tools are fixed to "Requires approval" with no option to change to "Always

allow"

1. Run the routine → agent cannot send Slack messages because it cannot auto-approve the tool call

Claude Model

Sonnet (default)

Is this a regression?

Yes, this worked in a previous version

Last Working Version

June 18, 2026

Claude Code Version

2.1.185

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

Terminal.app (macOS)

Additional Information

_No response_