[BUG] MCP tool calls fail with -32003 after approval on mobile web

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Bug

MCP tool calls to the claude-code-remote server (e.g. create_trigger,
send_later, list_triggers) consistently fail with error -32003:
MCP tool call requires approval, even after tapping "Allow" on the
mobile web interface (iOS Safari, claude.ai/code).

Steps to reproduce

1. Open a Claude Code web session on mobile (iOS)
2. Trigger any MCP tool call to the claude-code-remote server
3. Approval prompt appears — tap "Allow"
4. Tool still fails with -32003

Details

• Adding tools to settings.local.json permissions allow list does

not help

• Issue persists across multiple days and sessions
• Built-in tools (e.g. ScheduleWakeup) work fine
• Only MCP server tools are affected
• Proxy status shows no errors

What Should Happen?

MCP tool calls should execute successfully after user taps "Allow" on the approval prompt.

Error Messages/Logs

MCP error -32003: MCP tool call requires approval

Steps to Reproduce

1. Open a Claude Code web session on iOS Safari (claude.ai/code)
2. In the session, trigger any MCP tool call to the claude-code-remote server (e.g. create_trigger, send_later, list_triggers)
3. Approval prompt appears on screen — tap "Allow"
4. Tool returns error: MCP error -32003: MCP tool call requires approval

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.1.216

Platform

Anthropic API

Operating System

Other

Terminal/Shell

Other

Additional Information

Environment: Claude Code on the Web (claude.ai/code), remote cloud session running Linux 6.18.5. Client: iOS Safari (mobile).

The MCP server is the built-in claude-code-remote server (prefixed mcp__bf7c680d-...). Tools affected: create_trigger, send_later, list_triggers, fire_trigger, delete_trigger, update_trigger.

When any of these tools are called, the mobile web UI shows an approval prompt. After tapping "Allow", the tool still returns error -32003. This has persisted across multiple days and multiple sessions.

Workaround: built-in tools (e.g. ScheduleWakeup, Bash) work fine. Only MCP server tools fail. Adding tools to .claude/settings.local.json permissions allow list has no effect.

Proxy status shows no errors (recentRelayFailures: []).