[Bug] Org-level connector tool controls not enforced in Claude Code CLI

Bug Description
Org-level connector tool controls aren’t enforced (Team plan, Claude Code 0.3.270 and 0.3.281 via Agent SDK, auto mode). Admin set Gmail label_message to Blocked for all users and label_thread to Ask. Claude Code still lists label_message, and label_thread runs silently through the auto classifier. canUseTool is never called, and there’s no “Your organization requires approval for this tool”. GET /v1/mcp_servers returns tools: null and default_max_permission: "allow" for Gmail, while claude.ai’s /api/organizations/<org>/mcp/remote_servers/<id>/tools shows effective_max_permission: "ask" for the same tools. Related: #89304, #64521.

Environment Info

• Platform: darwin
• Terminal: xterm-256color
• Version: 2.1.280
• Feedback ID: 46359fb5-5906-4451-8ff2-eade56fcbaf1

Errors

[]