Curated tools for Claude Code, without the noise.

Bringing MCP 2026-07-28 to Claude — a stateless core, standardized extensions, and hardened auth · MCP 2026-07-28, the fifth spec release of the Model Context Protocol, is live. It moves MCP from a bidirectional stateful protocol to a stateless request/response core so servers can deploy on serverless and edge infrastructure, graduates MCP Apps and Tasks into a versioned extensions framework, and aligns authorization with production OAuth 2.0 and OIDC deployments. Support is rolling out across Claude products.

Claude Opus 5 · Anthropic introduced Claude Opus 5 on July 24, 2026, for complex agentic coding and enterprise work. It is priced at $5 per million input tokens and $25 per million output tokens, the same as Opus 4.8, with the model ID claude-opus-5, a 1M token context window, and 128k max output tokens. Adaptive thinking is now on by default, effort runs up to max, and two betas ship alongside it: mid-conversation tool changes and automatic fallbacks. It is the new default model on Claude Max and the strongest model on Claude Pro.

Ask Claude about the Anthropic Economic Index · A new connector lets you query the Anthropic Economic Index in claude.ai in plain language. Ask questions like "Which occupations use AI the most?" to explore AI adoption, task automation, and geographic usage patterns. There's nothing to install, but you do connect it once in the claude.ai connectors settings.

The iOS Simulator pane comes to Claude Code Desktop (public beta) · Claude Code Desktop opens your app in an iOS Simulator pane when Claude builds, runs, or checks it, streaming the device screen live next to your conversation. Watch Claude install and tap through the app to verify its own changes, or tap through it yourself. It's in public beta on macOS, available on Pro, Max, and Team plans.

Introducing Claude for Teachers · Claude for Teachers gives verified K-12 educators in the US free access to Claude, with teaching skills for lesson planning and differentiation, a Learning Commons of academic standards across all 50 states, and connectors to nine educational platforms. Sign up by June 30, 2027, for a full year of access.

Claude Code 2.1.223 · A Bash permission bypass where a crafted command could hide parts of itself from permission checks is fixed, along with permission prompts where tabs or invisible Unicode could hide part of the command from the approval dialog. Workflow scripts can no longer use dynamic import() to run code outside the workflow sandbox, and an agent definition's bypassPermissions mode no longer ignores the org bypass-permissions disable policy. The strictKnownMarketplaces and blockedMarketplaces managed settings now accept owner wildcard entries ("owner/*"), and cloud sessions show a /teleport hint for continuing locally with claude --teleport <session id>. CLAUDE_CODE_DISABLE_1M_CONTEXT now holds every Claude model with a native 1M window to 200K, and /review is an alias of /code-review.

Claude Code 2.1.222 · Worktree-isolated sessions and their subagents could run destructive git commands against the main checkout — isolation now applies to file edits and Bash in every session type, and PreToolUse auto-allow hooks no longer bypass tool restrictions in background agent tasks. In auto mode, messages sent to other agent sessions via SendMessage are now evaluated by the permission classifier before dispatch. Remote Control auto-start can no longer be turned on by repo-local settings (they can still turn it off) — enable it at user scope via /config — and the ultraplan feature is removed. Also fixed: the startup connectivity check hanging behind an HTTPS proxy, and /usage overattributing usage to MCP servers.

Claude Code 2.1.221 · The VS Code extension gains Focus view, a chat-menu toggle that hides tool activity behind an expandable per-turn summary. Sandbox credential files on Linux and WSL support `mode: "mask"`, where sandboxed commands read a sentinel copy while the sandbox proxy substitutes the real value on egress. Two permission-check bypasses are fixed: zsh executing hidden commands in `[[ ]]` regex conditionals, and PowerShell checks mishandling paths with quote characters on Windows. Background sessions now commit and push to preserve work and open a draft PR only when the task calls for one, and plugins installed from `/plugin` activate immediately when safe instead of always requiring `/reload-plugins`.

Claude Code 2.1.219 · Claude Opus 5 (`claude-opus-5`) is now the default Opus model, with 1M context and fast mode at $10/$50 per Mtok. `/fast` now applies to Opus 5 and Opus 4.8, and Opus 4.7 is out of fast mode. Subagents can spawn nested subagents up to depth 3 by default, and dynamic workflows default to a medium size guideline that aims for fewer than 15 agents. The release also adds `sandbox.network.strictAllowlist` to deny non-allowlisted hosts for sandboxed commands without prompting, a `DirectoryAdded` hook that fires when a working directory is registered mid-session, and fixes `claude -p` dropping the answer it had already produced when a turn dies on a mid-stream API error.

Claude Code 2.1.218 · `/code-review` now runs as a background subagent, so review work no longer fills your conversation and stacked slash commands stay as its review target. `/ultrareview` no longer fails on descriptive arguments like "review my auth changes", and `/code-review ultra` no longer silently runs a local review in non-interactive sessions — it launches the cloud review. Auto mode now lets the classifier adjudicate the dangerous-rm, background-`&`, and suspicious-Windows-path checks instead of opening permission dialogs, and skills with `context: fork` run in the background by default. The release also fixes Windows `\u`-prefixed paths corrupting into CJK characters, the left arrow key discarding the conversation with no undo, and a retry loop that re-sent identical doomed requests after a context-overflow error, alongside a large batch of session, input, and accessibility fixes.