Skip to main content
Claude Tag’s behavior is shaped by four layers, each set in a different place: Connections and plugins decide what Claude can do; instructions and memory shape how it does it.

​
Settings admins control

Access and organization-wide behavior are set at claude.ai/admin-settings/claude-tag, per scope (a scope is a channel, a workspace, or your whole organization), so the same agent can work differently in different channels. Most controls below are Owner-only.

​
Channel connections are separate from personal connectors

An Owner configures Claude’s connections, plugins, and skills, and they apply per scope. They are separate from the connectors, skills, or MCP servers an individual user has set up in their own claude.ai or Claude Desktop account. A user’s personal connectors are not part of a channel’s configuration, and the channel’s connections are not listed among that user’s personal connectors in claude.ai. In organizations where personal connectors in channels is available, Claude can use a user’s personal connectors in a channel for that user’s own tasks, after the user allows it. That work runs with the user’s permissions and is recorded under their name. Projects in claude.ai are separate too. Claude doesn’t read a Project’s instructions or knowledge in Slack, and a channel can’t be pointed at a Project. Put standing guidance for a channel in its custom instructions. To give Claude access to a tool that is not in the built-in connection list, including a custom MCP server, see add a custom connection.

​
Change behavior from the channel

Everything in the table below is open to channel members, with no admin involved. Changes in the table above are saved to channel memory; verify one stuck by asking what it remembers. Members can also tailor how Claude works in the channel from its Configure page on claude.ai. The Configure link in the footer of any Claude reply in the channel opens it, and if a member sends @Claude !configure in the channel, Claude replies with a link to it. Anyone in the channel who is also a member of your Claude organization can edit settings for that channel there, unless an admin has restricted editing to admins. The Channel instructions field on that page holds standing guidance that outranks memory. See configure Claude for a channel. The Configure page also shows the channel’s resolved access. Its Tools and access tab lists the channel’s resolved connections and any allowed domains. Members can see those lists but not change them there. The same tab’s Plugins card lists the plugins available to Claude in the channel; members can add plugins there unless an admin has restricted editing to admins. The card groups plugins Added by your admin, which members can’t remove, separately from plugins Added by members, which members can remove. The Configure page’s Routines tab lists the channel’s routines with each one’s schedule, status, and last run. On the Enterprise plan, an Owner can name channel managers for a channel. They set the channel’s default model, repositories, connections, and plugins from the same page.

​
Choose the model for a scope

Each scope carries a Default model setting in its Advanced section, alongside the environment and guest controls. It sets the model new channel sessions in that scope start on; the options are drawn from the models available to your organization, such as Opus and Sonnet models. A scope without its own setting inherits from its parent, and a channel’s setting overrides its workspace’s. The Inherit option shows which model the scope resolves to. To keep sessions on a model you chose, set a specific model at the organization scope rather than leaving the setting unset; every scope without an override then follows it. The setting applies to new sessions; threads already underway keep the model they started with. The footer of each Claude reply in Slack names the model that handled it, so you can confirm what a scope is running. Channel members can also change the model from Slack. Asking Claude in a thread switches that thread, and asking it to make a model the channel default changes what new threads in the channel start on, unless the scope’s Channel member edits setting is Block. See choose the model Claude Tag uses.

​
Models your organization allows

Claude Tag’s model lists come from the models your organization makes available for Claude Code, set in the Claude admin console, leaving out any that Claude Tag doesn’t support. A model you see in Claude Code can be absent in Slack for that reason. The allowed list applies in two places.
  • Model lists in Slack. The models Claude offers when someone asks it to switch, and the model selector for direct messages, show only allowed models. Claude declines a request to switch to a model outside the list.
  • Configured defaults. If your organization also enforces the policy on defaults and a workspace or channel’s Default model isn’t allowed by your organization’s Claude Code model policy, Claude declines to start the session and posts a notice in the thread asking the requester to contact an admin. A model excluded by your organization’s plan entitlements works differently. Claude starts the session on a fallback model the plan includes, and declines only when the plan excludes every fallback. The footer of the first reply names the model that served it, so check there to see which model the session started on.
A change to the allowed list applies to new sessions, like a change to the Default model; a thread already underway keeps its model until someone in it asks Claude to switch.

​
Configure the environment for a scope

Claude runs every channel session in a sandbox that starts with a standard set of tools. When a channel’s work needs something that sandbox doesn’t have, such as a language runtime, a database client, a set of environment variables, or broader web access, give the channel an environment. An environment is an organization-shared cloud environment: you create it once, then choose it on a scope, meaning a channel, a workspace, or Default Slack access. Both steps take an Owner; a channel manager can’t change a channel’s environment.

​
Decide what goes in the environment

An environment carries a setup script, environment variables, and a network access level. Not everything a channel needs belongs there, so match each need to its place before you create one: Keep credentials out of environment variables because every session on the environment reads them and Claude can print them. There is no separate secrets store. A connection stores the credential outside the sandbox and attaches it to matching requests at the network layer, so Claude uses the service without holding the raw value. Agent Proxy describes how. A connection also travels with the access bundle, so you choose channel by channel which sessions can use it. Repository-specific setup goes in CLAUDE.md so the people who maintain the repository keep it current. Claude reads it when it starts work in that repository.

​
Create the environment and choose it on a scope

Creating the environment and choosing it on a scope happen on two different admin pages. Choose it on a channel to change only that channel’s sessions, on a workspace to cover every channel in the workspace where you haven’t chosen one, or on Default Slack access to cover every workspace.
1

Create the environment

From the Cloud environments page in admin settings, add an organization-shared environment and fill in its setup script, environment variables, and network access level.
2

Set the scope's environment

The picker is at claude.ai/admin-settings/claude-tag > Claude Tag’s access > Slack > the scope (Default Slack is the organization-wide scope) > Advanced > Environment. Pick the environment there.
3

Confirm the environment in a new thread

Start a fresh thread in the channel and ask Claude to use what you added, such as running the tool your setup script installed. Threads already underway keep the environment they started on, so an existing thread won’t show the change.

​
Which environment a channel’s sessions use

When a session starts, Claude uses the first environment it finds, in this order:
  1. The channel’s Environment setting
  2. The workspace’s Environment setting
  3. The Environment setting on Default Slack access
  4. The organization’s default environment, which an Owner chooses under Cloud sessions at claude.ai/admin-settings/claude-code
If you haven’t chosen an environment on a scope, its picker shows Organization default, but sessions there may still run on an environment you chose on the workspace or on Default Slack access. In a channel where Claude runs with channel-only access because a guest is present, sessions run on the standard environment regardless of these settings. If a channel’s sessions aren’t on the environment you expect, see channel sessions use the wrong environment.

​
Auto mode allow rules

Sessions run in auto mode, where Claude’s permission checker reviews each action Claude is about to take and can flag or stop it. When you add an auto mode allow rule to a scope, you pre-approve one action in that scope’s sessions, so Claude runs it there without the checker stopping it. The checker keeps reviewing every other action. A rule is a plain sentence that describes work you approve in the scope, such as “Deploying to our staging cluster from a session in this channel is a normal, approved workflow.” To add one:
  1. On claude.ai/admin-settings/claude-tag, open the Slack tab under Claude Tag’s access and find the scope you want to change (the organization-wide Default Slack row, a workspace, or a channel). The Default Slack row opens as Default Slack access.
  2. Open the scope’s Advanced section and find Auto mode allow rules, below the Default model setting.
  3. Select Add rule and write the rule as one plain sentence.
The rules list has three properties:
  • Limits: a scope holds up to 50 rules, and each rule can be up to 1,024 characters
  • Inheritance: rules you set on a workspace or on Default Slack access (the organization-wide root) carry down to the channels beneath, the way custom instructions stack. A channel’s own rules add to those and never replace them, so put a rule on a single channel’s scope to pre-approve an action there without changing any other channel.
  • Access: you edit the list with the same admin access as the scope’s other Advanced settings
Once you add an allow rule, Claude runs the actions it names in every channel the scope covers without anyone approving them in the moment. Keep each rule narrow: name the tool, the action, and the environment it allows, and put rules that unlock sensitive systems on the narrowest scope that needs them.

​
Settings no one can change

  • The Claude app’s name, @-handle, and avatar in Slack are the same in every workspace; there is no rename or rebrand setting.