Claude Code v2.1.317 adds safety prompts, cost reporting and bug fixes

Anthropic published Claude Code v2.1.317 on November 3, 2026. The release adds several safety checks, new admin reporting and a set of bug fixes.

On the safety side, /schedule now warns when a new cloud scheduled task gets connectors the user did not request, and it explains how to remove them. Web and shell tool calls that would send the account email address to the network now trigger a check that asks first. Agent SDK hook callbacks also accept onFailure: "block", so a failed callback stops the action instead of letting it run.

For administrators, the Claude apps gateway admin API has a new cost report at GET /v1/organizations/analytics/cost. It totals past spend over a date range, grouped by total, developer, day or IdP group. Gateways set to admin: set also keep a daily record of each developer’s IdP groups, retained for admin.identity_retention_days. OpenTelemetry metrics, events and spans now include plan, seat type, provider and custom base URL attributes.

The release also fixes project and local MCP servers disconnecting after the first turn in some desktop sessions, and it stops auto mode from failing every turn when a gateway returns a 403 or 422 to its safety check.

Why it matters

The new warnings and checks make it harder for scheduled tasks or tool calls to reach external services without notice. The cost report and identity records give administrators a clearer view of spending and access. Teams that rely on gateways or MCP servers will also see fewer interruptions.

What to do

Teams using scheduled tasks should review their connectors after upgrading. Administrators who want the cost report should confirm retention settings and endpoint details on Anthropic’s documentation site before relying on them.