Connectors are in beta. Every command Claude runs goes through the per-connector policy engine (allow / deny / require_approval) and hardcoded safety denylist. Review the connector's Policy tab before pointing Claude at production hosts.