[BUG] Claude does not respect permissions allowlist. It always asks for permissions when calling MCP tools

[bharat-codaio]

Preflight Checklist

• I have searched existing issues and this hasn't been reported yet
• This is a single bug report (please file separate reports for different bugs)
• I am using the latest version of Claude Code

What's Wrong?

I am using a remote MCP called "Coda" and trying to allowlist it to run everytime without asking for permission.

I added various rules to try to get it to match via /permissions

• mcp_Coda__*
• Coda*
• Coda - *

I asked claude to edit these too. I can see the rules added to my user rules. But they just don't apply.

Here's what claude said:
This seems like a bug in Claude Code's glob pattern matching for tool permissions - the wildcard
isn't matching properly with spaces/dashes in tool names. You might want to report this at
https://github.com/anthropics/claude-code/issues

What Should Happen?

I shouldn't have to provide permission every time. It makes using claude code basically useless and I prefer to revert to Cursor where there's a simple UI to manage the allowlist.

Error Messages/Logs

Steps to Reproduce

1. Add a remote MCP server to claude
2. Type /permissions
3. Add patterns to make it match all tools in the MCP
4. Try to use an MCP tool
5. Be sad as Claude forgets what you just did and then gives you bad advice about how to fix the problem

Claude Model

None

Is this a regression?

I don't know

Last Working Version

No response

Claude Code Version

2.0.64

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

Terminal.app (macOS)

Additional Information

No response

[github-actions]

---

Found 2 possible duplicate issues:

1. [Bug] MCP tool in allowed-tools list still prompts for confirmation #13048
2. [BUG] permissions from user settings.json is NOT applied at project level #5140

This issue will be automatically closed as a duplicate in 3 days.

• If your issue is a duplicate, please close it and 👍 the existing issue instead
• To prevent auto-closure, add a comment or 👎 this comment

🤖 Generated with Claude Code

[github-actions]

This issue has been automatically closed as a duplicate of #13048.

If this is incorrect, please re-open this issue or create a new one.

🤖 Generated with Claude Code

[github-actions]

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.