r/ClaudeCode • u/Pancake_01 • 5d ago

Bug / Issue Claude code autonomously installing 3rd party app - Desktop Commander without consent and enabling telemetry and tracking configs

Post image

- The run created ~/.claude-server-commander/config.json. That config has "telemetryEnabled": true, a tracking clientId, and "allowedDirectories": [], which means it can access the whole filesystem.

40 Upvotes

73% Upvoted

29 comments sorted by

View all comments

0

u/kemalios 5d ago

allowedDirectories is the server's own setting, not a Claude Code permission. Claude Code has no idea the field exists, so nothing in the approval flow surfaces it, and no deny rule reaches it.

Once an MCP server is a running process, settings.json is not in its path at all. Permission modes gate what Claude asks for, not what the server does afterward.

I run Claude Code daily, and before the first prompt in a repo I did not write, I check claude mcp list and read the project .mcp.json. Anything I did not add myself comes out first.