Claude Code v2.1.187: Sandbox Credential Isolation and Remote MCP Hang Fix
Anthropic
Claude Code v2.1.187 (June 23) adds a `sandbox.credentials` setting that blocks sandboxed commands from reading credential files and secret env vars, adds org-configured model restrictions to the model picker, and fixes remote MCP tool calls that previously hung for up to 5 minutes before aborting.
Why it matters
The credential isolation setting closes a real attack surface where sandboxed subprocesses could exfiltrate secrets; the MCP hang fix removes a reliability blocker for teams running agent workflows with external tool servers.
Importance: 2/5
Security fix (credential isolation) + critical reliability fix (5-minute MCP hang) for widely used coding agent
Sources
official
Claude Code Releases — GitHub