Last updated Nov 9, 2026
November 2026
15 changesClaude apps
Enterprise teams can tag projects with cost codes
Eligible Enterprise orgs can tag projects with codes, like a charge code, and see spend by tag. It is a beta.
Source:Claude support release notes
Claude can link to your bank accounts, read-only
Personal Finance is a beta on Pro, Max and Ultra plans in the US. You choose which accounts to connect. Claude "can't move, manage, or invest your money."
Source:AnthropicTechCrunch
Claude Enterprise gets a security center
The beta checks a company's settings against what Anthropic recommends. Anthropic calls the result "guidance," not a certification.
Source:Anthropic
Claude Marketplace adds 14 agents and products
They include Datadog, Netlify, Runway, Webflow, Asana and Zoom. Eligible enterprise customers can pay for them from their Anthropic commitment.
Source:Anthropic
Claude Code
Claude Code closes a hole in its permission checks
Version 2.1.319 fixes a bug where a crafted prefix could hide part of a shell command from permission checks.
Source:Claude Code changelog
Claude Code asks before sending your account email out
Version 2.1.317 asks before a web or shell tool call sends your account email to the network.
Source:Claude Code changelog
API
API organizations can refuse requests from unknown addresses
A new IP allowlist (beta) only lets in requests from addresses on your list. Anthropic says that makes a leaked key much harder to use.
Source:Claude Platform docs
Enterprise admins can sign a member out everywhere
The Admin API can now sign a member out of Claude in one call (beta). It does not end their API keys, running cloud sessions or scheduled routines.
Source:Claude Platform docs
Text from some Claude models now carries a watermark
It covers Mythos 5, Opus 4.7 and Sonnet 4.6 on the platforms Anthropic lists. Anthropic says it does not change "the meaning, quality, or readability" of the text.
Long agent chats can reply faster with message threads
In the API beta, you send the chat once, then only new messages. For the biggest requests, Anthropic says the typical wait for the first token drops "by about 35%." The price stays the same.
Source:Anthropic
Reports & research
METR says AI likely doubled Anthropic's pace on well-specified tasks
METR says Anthropic is "likely" improving its models "on well-specified tasks at around twice the rate" of March 2024 to October 2025. METR says its estimate is very uncertain.
Source:METR
A scan found 38% of reachable MCP servers had no authentication
The scan reached 514 servers. It is one scanner's view and has not been peer reviewed.
Source:Security Boulevard
A researcher reports a Claude Dispatch flaw he calls "ThisBash"
He says a bad browser extension can make Claude Desktop run code. He says Anthropic closed his report as a duplicate. Anthropic did not answer The Register's questions.
Anthropic found two serious Xen holes using Claude
The Xen Project's advisory says Ada Logics confirmed them. One bad virtual machine could read and write the memory of others.
Anthropic's updated IPO filing says it "may imminently" reach its own safety line
The line is for AI that greatly speeds up its progress. TechCrunch reports Anthropic says no current model has crossed it.
Source:TechCrunch
fuel for the obsessed builder
Get these changes every Sunday.
One email every Sunday with everything that changed in Claude this week, with every claim linked to its source.
Free. Unsubscribe anytime.