Organizations using Claude Code should treat .mcp.json, .claude/, and related agent configuration files as executable code. Teams should review agent configuration changes before checking out or ...