Skip to main content
Configuration keys by Claude Desktop release. Each section lists keys added in that release, with the MDM key name (for plist/registry deployment) and the equivalent JSON shape (for local-file or bootstrap remote configuration).

1.14271

MDM keyTypeDescription
chatAdvancedFileAnalysisEnabledbooleanAdvanced file analysis
inferenceSessionLifetimeSecintegerSign-in session lifetime
JSON (Non-MDM User, Bootstrap Remote):
{
  "chatSurface": {
    "advancedFileAnalysis": "<boolean>"
  },
  "inference": {
    "sessionLifetimeSec": "<integer>"
  }
}
Deprecated:
  • betaFeaturesEnabled — Allow beta features (added and deprecated in this release)

1.13576

MDM keyTypeDescription
chatTabEnabledbooleanAllow Chat tab
inferenceBedrockAwsCliPathstringAWS CLI path
JSON (Non-MDM User, Bootstrap Remote):
{
  "chatSurface": {
    "enabled": "<boolean>"
  },
  "inference": {
    "awsEnv": {
      "awsCliPath": "<string>"
    }
  }
}

1.12603

MDM keyTypeDescription
inferenceVertexOAuthLoginHintstringVertex OAuth login hint
JSON (Non-MDM User, Bootstrap Remote):
{
  "inference": {
    "credential": {
      "loginHint": "<string>"
    }
  }
}

1.10628

MDM keyTypeDescription
inferenceVertexWorkforceAudiencestringWorkforce Identity audience
inferenceVertexWorkforceUserProjectstringWorkforce Identity billing project
inferenceVertexWorkforceOidcobjectWorkforce Identity IdP (OIDC)
organizationPluginsUrlstringOrganization plugins endpoint
autoModeEnabledbooleanAllow Auto mode
inferenceCredentialHelperSilentRefreshEnabledbooleanRe-run helper for silent refresh
bootstrapEnabledbooleanUse bootstrap config
bootstrapUrlstringBootstrap config URL
bootstrapOidcobjectBootstrap OIDC parameters
JSON (Non-MDM User, Bootstrap Remote):
{
  "inference": {
    "credential": {
      "audience": "<string>",
      "userProject": "<string>",
      "oidc": {
        "issuer": "<string>",
        "authorizationUrl": "<string>",
        "tokenUrl": "<string>",
        "clientId": "<string>",
        "scopes": "<string>",
        "redirectPort": "<integer>"
      },
      "silentRefreshEnabled": "<boolean>"
    }
  }
}

1.9659

MDM keyTypeDescription
coworkTabEnabledbooleanAllow Cowork tab
JSON (Non-MDM User, Bootstrap Remote):
{
  "coworkSurface": {
    "enabled": "<boolean>"
  }
}

1.9255

MDM keyTypeDescription
otlpDesktopLogLevelenumDesktop telemetry export level
inferenceFoundryTenantIdstringEntra ID tenant ID
inferenceFoundryClientIdstringEntra ID client ID
JSON (Non-MDM User, Bootstrap Remote):
{
  "otlp": {
    "desktopLogLevel": "<off|error|warn|info|debug>"
  },
  "inference": {
    "credential": {
      "tenantId": "<string>",
      "clientId": "<string>"
    }
  }
}

1.8555

MDM keyTypeDescription
inferenceCredentialKindenumCredential kind
JSON (Non-MDM User, Bootstrap Remote):
{
  "inference": {
    "credential": {
      "kind": "<static|helper-script|interactive|vendor-profile>"
    }
  }
}

1.8089

MDM keyTypeDescription
inferenceAnthropicApiKeystringClaude API key
inferenceCustomHeadersobjectCustom inference headers (renamed from inferenceGatewayHeaders)
modelDiscoveryEnabledbooleanModel discovery
orgPluginSettingsobjectOrganization plugin settings
builtinToolPolicyobjectBuilt-in tool policy
inferenceCredentialHelperTimeoutSecintegerCredential helper timeout
JSON (Non-MDM User, Bootstrap Remote):
{
  "inference": {
    "credential": {
      "apiKey": "<string>",
      "timeoutSec": "<integer>"
    },
    "customHeaders": "<object>"
  }
}

1.7196

MDM keyTypeDescription
bannerobjectOrganization banner

1.6889

MDM keyTypeDescription
disableDeepLinkRegistrationbooleanDisable claude:// deep-link handling
inferenceGatewayOidcobjectGateway SSO IdP (OIDC)
JSON (Non-MDM User, Bootstrap Remote):
{
  "inference": {
    "credential": {
      "oidc": {
        "issuer": "<string>",
        "authorizationUrl": "<string>",
        "tokenUrl": "<string>",
        "clientId": "<string>",
        "scopes": "<string>",
        "redirectPort": "<integer>",
        "bearerTokenType": "<id_token|access_token>",
        "appendOfflineAccess": "<boolean>"
      }
    }
  }
}

1.6259

MDM keyTypeDescription
inferenceBedrockSsoStartUrlstringAWS SSO start URL
inferenceBedrockSsoRegionstringAWS SSO region
inferenceBedrockSsoAccountIdstringAWS SSO account ID
inferenceBedrockSsoRoleNamestringAWS SSO role name
JSON (Non-MDM User, Bootstrap Remote):
{
  "inference": {
    "credential": {
      "ssoStartUrl": "<string>",
      "ssoRegion": "<string>",
      "ssoAccountId": "<string>",
      "ssoRoleName": "<string>"
    }
  }
}

1.5354

MDM keyTypeDescription
otlpResourceAttributesobjectOpenTelemetry resource attributes
JSON (Non-MDM User, Bootstrap Remote):
{
  "otlp": {
    "resourceAttributes": "<object>"
  }
}

1.5186

MDM keyTypeDescription
inferenceBedrockServiceTierenumBedrock service tier
JSON (Non-MDM User, Bootstrap Remote):
{
  "inference": {
    "serviceTier": "<flex|priority>"
  }
}

1.3834

MDM keyTypeDescription
disableDeploymentModeChooserbooleanDisable Claude.ai sign-in

1.3036

MDM keyTypeDescription
inferenceGatewayAuthSchemeenumGateway auth scheme
JSON (Non-MDM User, Bootstrap Remote):
{
  "inference": {
    "credential": {
      "authScheme": "<auto|x-api-key|bearer|sso>"
    }
  }
}

Baseline

MDM keyTypeDescription
isDesktopExtensionEnabledbooleanAllow desktop extensions (renamed from isDxtEnabled)
isDesktopExtensionSignatureRequiredbooleanRequire signed extensions (renamed from isDxtSignatureRequired)
isLocalDevMcpEnabledbooleanAllow user-added MCP servers
isClaudeCodeForDesktopEnabledbooleanAllow Claude Code tab
coworkEgressAllowedHostsarray<string>Allowed egress hosts
otlpEndpointstringOpenTelemetry collector endpoint
otlpProtocolenumOpenTelemetry exporter protocol
otlpHeadersobjectOpenTelemetry exporter headers
autoUpdaterEnforcementHoursintegerAuto-update enforcement window
disableAutoUpdatesbooleanBlock auto-updates
inferenceProviderenumInference provider
inferenceGatewayBaseUrlstringGateway base URL
inferenceGatewayApiKeystringGateway API key
inferenceVertexProjectIdstringGCP project ID
inferenceVertexRegionstringGCP region
inferenceVertexCredentialsFilestringGCP credentials file path
inferenceVertexOAuthClientIdstringVertex OAuth client ID
inferenceVertexOAuthClientSecretstringVertex OAuth client secret
inferenceVertexOAuthScopesstringVertex OAuth scopes
inferenceVertexBaseUrlstringVertex AI base URL
inferenceBedrockRegionstringAWS region
inferenceBedrockBearerTokenstringAWS bearer token
inferenceBedrockBaseUrlstringBedrock base URL
inferenceBedrockProfilestringAWS profile name
inferenceBedrockAwsDirstringAWS config directory
inferenceFoundryResourcestringAzure AI Foundry resource name
inferenceFoundryApiKeystringAzure AI Foundry API key
inferenceModelsarray<string|object>Model list
deploymentOrganizationUuidstringOrganization UUID
disableEssentialTelemetrybooleanBlock essential telemetry
disableNonessentialTelemetrybooleanBlock nonessential telemetry
disableNonessentialServicesbooleanBlock nonessential services
managedMcpServersarray<object|object|object|null>Managed MCP servers
disabledBuiltinToolsarray<string>Disabled built-in tools
allowedWorkspaceFoldersarray<string|object>Allowed workspace folders
inferenceCredentialHelperstringHelper script
inferenceCredentialHelperTtlSecintegerHelper script TTL
inferenceMaxTokensPerWindowintegerMax tokens per window
inferenceTokenWindowHoursintegerToken cap window
Deprecated:
  • requireCoworkFullVmSandbox — Require full VM sandbox