Claude Code version 2.1.281 introduces new capabilities for the Claude apps gateway, including support for newer Claude Desktop keys in policy blocks, IAM role assumption on Bedrock upstreams, and configurable guardrails. The update also enhances the CLI with MCP URL-mode elicitation for browser-based flows and validation checks for plugin configurations.

  • Added `blockReadsOutsideWorkingDirectories` and `disableBypassPermissionsMode` to desktop policy blocks.
  • Enabled `assume_role` on Bedrock upstreams via STS, allowing cross-account access.
  • Implemented `guardrail: {id, version}` configuration for Amazon Bedrock requests.
  • Introduced MCP URL-mode elicitation on 2026-07-28 protocol connections.
  • Added `claude plugin validate` checks for `.mcp.json` entries and insecure URLs.

These changes improve gateway security and flexibility while addressing numerous session stability issues, including crashes during API retries, prompt cache loss, and permission dialog errors.