[Bug] Auto mode classifier denies MCP tool calls already in permissions allow list

Bug Description

• this is a background job running in auto mode. In an interactive session you'd have gotten a permission dialog and could have clicked allow. In auto mode the classifier stands in for that dialog, and there's no human in the loop for it to ask — so it declined on its own.
• Permission for this action was denied by the Claude Code auto mode classifier. Reason: Blocked by classifier.

Those are absurd blockers, i'm running the queries to a local testing database, there is an mcp server set in readonly mode to access to the database to enforce the security, all the bash and ' mysql ' permissions are denied. I WANT THE AGENT RUN THE QUERY through the mcp without setting the permissions for a thing that is already allowed.

Background isolation already disabled for this repo

    "worktree": {
      "bgIsolation": "none"
    },

Environment Info

• Platform: darwin
• Terminal: xterm-256color
• Version: 2.1.234
• Feedback ID: 7fbb0aab-908b-45e3-b398-52c79eedc075

Errors

[]