Anthropic: Claude Code v2.1.214 Gets EndConversation Tool to Autonomously End Abusive Conversations

What’s new with EndConversation?

Anthropic released Claude Code v2.1.214 on July 18, 2026, the successor to v2.1.212 from a day earlier. The headline feature is the EndConversation tool, which gives Claude Code — Anthropic’s CLI (command-line interface) coding agent — the ability to autonomously end a session. The mechanism activates in cases of severe user abuse or jailbreak attempts, i.e., manipulating the model to bypass safety guardrails.

Where the tool came from: from claude.ai to the CLI

EndConversation isn’t an entirely new capability in Anthropic’s ecosystem. On claude.ai, the web interface for chatting with Claude, the ability to end a conversation has been available since 2025. Version v2.1.214 brings that same logic to the CLI environment for the first time, where the agent works autonomously with the terminal and files, making the risk of misuse different than in a chat interface.

Heartbeat signal and new OpenTelemetry tracking

A new periodic “heartbeat” reports progress during long-running tool calls that previously stayed silent while working in the background. Users can now see that a session is still active instead of guessing whether the process has frozen. The release also adds new OpenTelemetry (a standard for telemetry and tracing) attributes — message.uuid, client_request_id, and tool_source — enabling tracking at the level of individual messages rather than just the whole session.

Security fixes behind the scenes

Alongside v2.1.214 come dozens of permission fixes: corrections in Bash, Windows PowerShell 5.1, and zsh variable handling. The most significant is a fix to dir/** allow rules, which previously incorrectly granted access to nested subdirectories outside the intended scope. Unlike v2.1.212, which changed the behavior of the /fork command, v2.1.214 focuses on security and visibility into the agent’s work, without changes to user-facing commands.