[BUG] Claude in Chrome: navigate fails with "Navigation to this domain is not allowed" for every domain, including after a full browser restart and re-pairing; no consent prompt ever surfaces

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Within a single session, navigate calls against outlook.cloud.microsoft and follow-up computer actions (screenshot, scroll) succeeded repeatedly with zero prompts — no Claude Code permission prompt, no Claude-in-Chrome consent popup. A delegated subagent (separate tab group, same paired browser) then got an immediate hard denial navigating to the same domain: "Navigation to this domain is not allowed." Retesting shortly after in the main session itself, the same denial started appearing for that domain, then for a completely unrelated domain (example.com), even after explicitly re-selecting the browser (select_browser). A full Chrome close/reopen and fresh re-pairing did not clear it — navigate to example.com is still denied post-restart.

What Should Happen?

navigate should either consistently work (if the domain/profile is trusted) or consistently prompt for consent with a way to grant persistent access — not silently flip between working and hard-denying with no visible state change or explanation.

Error Messages/Logs

Navigation to this domain is not allowed

Steps to Reproduce

1. In an interactive Claude Code session, pair a Chrome browser (list_connected_browsers → select_browser).
2. Call navigate to a login-gated domain (e.g. a webmail/OWA-style domain already signed in in that Chrome profile). Works initially — page loads, no prompt of any kind.
3. At some point (not tied to any deliberate action — it followed a delegated subagent's navigate call to the same domain being denied, see below), navigate calls from the main session start failing too, for that domain and for an unrelated one (example.com), with "Navigation to this domain is not allowed."
4. Retry with an explicit tabId. Still denied.
5. Call select_browser again to re-pair. Still denied.
6. Close Chrome entirely, reopen it, re-pair (list_connected_browsers → select_browser, confirmed as a fresh connection with a new connectedAt timestamp). navigate to example.com is still denied.

Also observed (the asymmetry that preceded the above): a task delegated to a custom subagent (tool grant includes navigate/computer/tabs_context_mcp but not list_connected_browsers/select_browser) got its own fresh tab group (blank chrome://newtab/) and was denied navigating to the same domain the main session had just reached successfully, at that point in time.

Claude Model

Sonnet (default)

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

1.0.85

Platform

Anthropic API

Operating System

Windows

Terminal/Shell

PowerShell

Additional Information

_No response_