# Claude Code 2.1.187: sandbox credential blocking and org model restrictions

> Adds a `sandbox.credentials` setting that stops sandboxed commands from reading credential files and secret env vars, plus org-level model restrictions enforced across the picker, `--model`, `/model`, and `ANTHROPIC_MODEL`. Fixes hung remote MCP tool calls and structured-output loops.

| | |
|---|---|
| **Tool** | Claude Code |
| **Version** | 2.1.187 |
| **Kind** | release |
| **Published** | 2026-06-23 |
| **Observed** | 2026-08-11 |
| **Significance** | 3/5 |
| **Breaking** | no |
| **Categories** | security, feature, fix |

## What changed


- New `sandbox.credentials` setting blocks sandboxed commands from reading credential files and secret environment variables
- Org-configured model restrictions now apply to the model picker, `--model`, `/model`, and `ANTHROPIC_MODEL`, with a "restricted by your organization's settings" message
- Mouse click support in select menus (permission prompts, `/model`, `/config`) in fullscreen mode
- Fix: remote MCP tool calls hanging with no response for 5 minutes now abort with an error; override via `CLAUDE_CODE_MCP_TOOL_IDLE_TIMEOUT`
- Fix: `--json-schema` and workflow `agent({schema})` — the model can no longer re-call `StructuredOutput` indefinitely after a successful call; follow-up turns reliably return structured output
- Fix: `--resume` failing with "No conversation found" when the original `-p` run produced no model turns
- Fix: Remote sessions taking ~2.7s longer to start after the agent proxy CA system-trust install
- Fix: subagent depth tracking — resumed subagents restore original spawn depth, forked subagents count toward the cap
- Fix: leaked agent worktree registrations — locked `.git/worktrees/` entries from killed agents cleaned up automatically
- Fix: pasted Korean/CJK text turning into mojibake on terminals delivering paste as per-byte extended-key events
- Fix: background jobs stuck in "working" when the agent ended a turn without structured output
- Fix: Cmd+click not opening URLs in fullscreen in Ghostty on macOS; `claude --help` missing `--bg`/`--background`
- Improved: `/install-github-app` can install only the GitHub App and skip workflow/secret setup
- [VSCode] Fix: extension unresponsive when resuming a large session


## Sources

- [changelog_md](https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md) — retrieved 2026-08-11

## Community

_No curated reactions recorded. Facts and community takes are kept in separate layers
and never blended._

---
Canonical: https://changelogs.info/claude-code/2-1-187
Entity: https://changelogs.info/claude-code
Event ID: `evt_2026-06-23_claude-code_2-1-187`
Licence: event synthesis © changelogs.info, CC BY 4.0. Linked sources belong to their vendors.