// event · cli

Claude Code v2.1.281 adds Bedrock assume_role, guardrails, MCP URL-mode elicitation

cli

vendor: anthropicpublished: 19d agoconfidence: 0.90id: 6311c860-9313-4325-83ca-2ff2806a69cc

Claude Code CLI v2.1.281 expands the Claude apps gateway with AWS Bedrock STS `assume_role` upstreams, per-request Amazon Bedrock guardrail enforcement, telemetry resource attributes, and new desktop policy blocks. It also adds MCP URL-mode elicitation on the 2026-07-28 protocol (servers can open browser flows), MCP checks in `claude plugin validate`, an auto-mode recommendation in `/insights`, plus dozens of resume, retry, sandbox, and permission fixes.

capability delta

An agent can now route through a Claude apps gateway that assumes an IAM role into another AWS account to call Bedrock with a required Bedrock guardrail attached, and MCP servers can drive browser-based elicitation flows over the 2026-07-28 protocol.

curator note

Large patch release; headline items are Bedrock gateway assume_role + guardrails and MCP URL-mode elicitation on the new 2026-07-28 protocol. Also notable: `attribution:false` setting, `claude plugin validate` MCP checks, and safer recursive-rm handling in auto/skip-permissions mode.

// install

npm i -g @anthropic-ai/claude-code@2.1.281

npm · @anthropic-ai/claude-code @ 2.1.281

// example

yaml

# Claude apps gateway config: Bedrock upstream with assume_role + guardrail
upstreams:
  - kind: bedrock
    region: us-east-1
    assume_role:
      role_arn: arn:aws:iam::123456789012:role/ClaudeGatewayBedrock
      session_per_developer: true
    guardrail:
      id: gr-abc123
      version: "3"

telemetry:
  resource_attributes:
    service.name: claude-desktop
    deployment.environment: prod

// links

claude-codeclimcpbedrockguardrailsawsgatewayelicitation

source: github_release · https://github.com/anthropics/claude-code/releases/tag/v2.1.281