AI release notes

Claude Code·Aug 6, 2026

Claude Code 2.1.223

Added owner wildcard entries ("owner/*") to the strictKnownMarketplaces and blockedMarketplaces managed settings for allowing or blocking all marketplace repos under a GitHub org. Added a warning when workflow agents, forked skills, slash commands, or resumed background agents' requested subagent model is restricted and the parent model runs instead.

Claude apps·Aug 6, 2026

Skill and plugin security scanning (beta)

Enterprise plans can now turn on skill and plugin security scanning to automatically check third-party skills and plugins for malicious content when someone uploads or edits them.

Claude API·Aug 5, 2026

Inference hooks are now in beta for Claude Enterprise organizations

Point Claude at your organization’s AI security server, and each governed prompt across claude.ai, Cowork, and Claude Code is held for the server’s allow or deny verdict before inference proceeds. Requests are signed, failure handling is configurable, and every denial is recorded in the compliance Activity Feed. We’ve retired the Claude Opus 4.1 model (claude-opus-4-1-20250805).

Claude Code·Aug 4, 2026

Claude Code 2.1.222

Fixed worktree-isolated sessions and their subagents being able to run destructive git commands against the main checkout; isolation now applies to file edits and Bash in every session type. Fixed PreToolUse auto-allow hooks bypassing tool restrictions in background agent tasks (summaries, compaction, renames).

Claude Code·Aug 4, 2026

Claude Code 2.1.221

[VSCode] Added Focus view: a chat-menu toggle that hides tool activity behind an expandable per-turn summary with a live running-tool indicator, toggled with Ctrl+Alt+F or the "Claude Code: Toggle Focus view" command. Added mode: "mask" for sandbox credential files on Linux and WSL — sandboxed commands read a sentinel copy (the whole file, or just the spans captured by an extract regex) while the sandbox proxy substitutes the real value on egress; on macOS file masking falls back to deny.

Claude API·Aug 3, 2026

The Compliance API now returns transcripts of Cowork sessions started on claude.ai web or mobile, in beta…

GET /v1/compliance/apps/sessions/remote lists sessions and GET /v1/compliance/apps/sessions/remote/{session_id}/messages returns one session’s transcript, using your existing Compliance Access Key with the read:compliance_user_data scope.

Claude API·Aug 1, 2026

Dreams now supports Claude Opus 5

Claude Code·Jul 25, 2026

Claude Code 2.1.220

Bug fixes and reliability improvements.

Claude Code·Jul 24, 2026

Claude Code 2.1.219

Added Claude Opus 5 (claude-opus-5), now the default Opus model — 1M context, fast mode at $10/$50 per Mtok. Added sandbox.network.strictAllowlist setting to deny non-allowlisted hosts for sandboxed commands without prompting.

Claude API·Jul 24, 2026

On Claude Opus 5, disabling thinking is allowed only at effort high or below: thinking: {"type": "disabled"}…

Effort is the primary control for steering Claude Opus 5: the model supports the full ladder (low, medium, high, xhigh, max), with max for capability-critical work. Mid-conversation tool changes are now in beta on Claude Fable 5, Claude Mythos 5, Claude Opus 4.8, and Claude Opus 5: add or remove tools between turns of a conversation while preserving the prompt cache. The fallbacks parameter now supports a "default" mode, which applies Anthropic’s recommended fallback models by refusal category. We’ve removed fast mode for Claude Opus 4.7.

Claude apps·Jul 24, 2026Announcement

Claude Opus 5 launch

We launched Claude Opus 5, a thoughtful and proactive model that comes close to the frontier intelligence of Claude Fable 5 at half the price.

New model·Jul 24, 2026Announcement

New model: Claude Opus 5

We’ve launched Claude Opus 5 (claude-opus-5), a step-change improvement over Claude Opus 4.8. Claude Opus 5 supports a 1M token context window (both the default and the maximum), 128k max output tokens, and thinking on by default, at $5 / $25 USD per MTok, the same pricing as Claude Opus 4.8. It’s available on the Claude API, Claude in Amazon Bedrock, Claude Platform on AWS, Claude on Google Cloud, and Claude in Microsoft Foundry.

Claude Code·Jul 22, 2026

Claude Code 2.1.218

Added screen-reader announcements of deleted text for word and line deletions (Option+Delete, Ctrl+W, Cmd+Backspace, Ctrl+U, Ctrl+K) in --ax-screen-reader mode. Added HTTP status and error text to claude mcp list and /mcp when a server fails to connect, and a warning for MCP config values with hidden leading or trailing whitespace.

Claude API·Jul 22, 2026

You can now set an effort level on a Claude Managed Agents agent’s model configuration

Pass effort inside the model object when you create the agent. Webhooks for Claude Managed Agents now cover the environment and memory store lifecycle: four environment.* event types and three memory_store.* event types. When creating a Claude Managed Agents session, you can now seed it with initial events. The version field is now optional when updating a Claude Managed Agents agent. Claude Managed Agents session thread event streams now support event deltas.

Claude Code·Jul 21, 2026

Claude Code 2.1.217

Added emoji shortcode autocomplete in the prompt input: type :heart: to insert ❤️, or :hea for suggestions — disable with the emojiCompletionEnabled setting. Added warnings when transcript writes are failing (e.g. disk full) or when session saving is off due to an inherited environment variable, instead of losing transcripts silently.

Claude Code·Jul 20, 2026

Claude Code 2.1.216

Added sandbox.filesystem.disabled setting to skip filesystem isolation while keeping network egress control.

Claude Code·Jul 19, 2026

Claude Code 2.1.215

Claude no longer runs the /verify and /code-review skills on its own; invoke them with /verify or /code-review when you want them.

Claude Code·Jul 18, 2026

Claude Code 2.1.214

Added the EndConversation tool: Claude can end sessions with highly abusive users or jailbreak attempts, as on claude.ai since 2025 — see https://www.anthropic.com/research/end-subset-conversations. Added a periodic progress heartbeat for long-running tool calls that previously went silent.

Claude Code·Jul 17, 2026

Claude Code 2.1.212

Added claude auto-mode reset to restore the default auto-mode configuration, with a confirmation prompt (pass --yes to skip). Added a session-wide limit on WebSearch tool calls (default 200, tunable via CLAUDE_CODE_MAX_WEB_SEARCHES_PER_SESSION) to stop runaway search loops.

Claude API·Jul 17, 2026

The legacy Workbench in the Claude Console is being sunset with access ending on August 17, 2026

Saved prompts, variables, and evals are not supported in the updated Workbench in the Console. You can export any data you want to keep from the banner and under your Organizational Settings. For more, see How do I use the Workbench? in the Claude Help Center. The experimental prompt tools APIs for generating, improving, and templatizing prompts (/v1/experimental/generate_prompt, /v1/experimental/improve_prompt, and /v1/experimental/templatize_prompt) are being retired along with the Workbench on August 17, 2026.

Claude Code·Jul 15, 2026

Claude Code 2.1.211

Added --forward-subagent-text flag and CLAUDE_CODE_FORWARD_SUBAGENT_TEXT environment variable to include subagent text and thinking in stream-json output.

Claude API·Jul 15, 2026

Mid-conversation system messages are available on Claude Fable 5, Claude Mythos 5, and Claude Opus 4.8, on…

No beta header is required. This corrects earlier availability notes.

Claude Code·Jul 14, 2026

Claude Code 2.1.210

Added a live elapsed-time counter to the collapsed tool summary line so long-running tool calls visibly tick instead of looking stuck. Added a startup warning for Write(path), NotebookEdit(path), and Glob(path) permission rules — use Edit(path) or Read(path) instead.

Claude Code·Jul 14, 2026

Claude Code 2.1.209

Fixed /model and other dialogs being blocked in claude agents background sessions (reverts an overly broad guard).

Claude Code·Jul 14, 2026

Claude Code 2.1.208

Added screen reader mode: opt-in plain-text rendering for screen reader users. Run claude --ax-screen-reader, set CLAUDE_AX_SCREEN_READER=1, or add "axScreenReader": true to settings. Added vimInsertModeRemaps setting: map two-key insert-mode sequences like jj to Escape in vim mode.

Claude API·Jul 14, 2026

You can now manage the people in your Claude Enterprise organization with the Admin API, in beta for all…

Group and custom-role requests require the anthropic-beta: ce-user-management-2026-07-13 beta header; member and invite requests take no beta header. An Admin API key with the read:org_audit scope can also call every user-management GET endpoint.

Claude apps·Jul 14, 2026

HIPAA configuration for your Claude organizations is now self-serve

You can now manage HIPAA readiness for your Claude organizations yourself. This applies to both Claude Enterprise and the Claude Platform (API). In each product, an eligible admin can review the Business Associate Agreement (BAA), download the implementation guide, and enable the HIPAA configuration in a single flow.

Claude Code·Jul 11, 2026

Claude Code 2.1.207

Auto mode is now available without CLAUDE_CODE_ENABLE_AUTO_MODE opt-in on Bedrock, Vertex AI, and Foundry; disable via disableAutoMode in settings. Fixed the terminal freezing and keystrokes lagging while streaming responses containing very long lists, tables, paragraphs, or code blocks.

Claude Code·Jul 10, 2026

Claude Code 2.1.206

Added directory path suggestions to /cd, matching /add-dir behavior. Added a /doctor check that proposes trimming checked-in CLAUDE.md files by cutting content Claude could derive from the codebase.

Claude API·Jul 10, 2026

Dreams now supports Claude Fable 5 and Claude Sonnet 5

We’ve expanded the Access Transparency documentation of cmek_preserve events with a filter example, an example event payload, and two preservation reason codes (policy_violation_investigation, csae_report).