const INTERPRETERS: [&str; 7];Expand description
Executables an stdio MCP server’s live process image runs under, matched on
the argv[0] basename so a server that execed out of its configured
sh -c wrapper still qualifies.
No shell belongs here. A shell is how claude spawns both its Bash-tool
wrapper and its type: "command" hooks, and both land as direct children of
the same pid - so whitelisting one puts every tool call and hook in the
candidate pool, which declines the pairing and drops the row out of the MCP
tier while it runs. Nothing is lost: a server that has execed is no longer
shell-shaped, and one that hasn’t still text-matches its own -c script.