1.14271
| MDM key | Type | Description |
|---|---|---|
chatAdvancedFileAnalysisEnabled | boolean | Advanced file analysis |
inferenceSessionLifetimeSec | integer | Sign-in session lifetime |
betaFeaturesEnabled— Allow beta features (added and deprecated in this release)
1.13576
| MDM key | Type | Description |
|---|---|---|
chatTabEnabled | boolean | Allow Chat tab |
inferenceBedrockAwsCliPath | string | AWS CLI path |
1.12603
| MDM key | Type | Description |
|---|---|---|
inferenceVertexOAuthLoginHint | string | Vertex OAuth login hint |
1.10628
| MDM key | Type | Description |
|---|---|---|
inferenceVertexWorkforceAudience | string | Workforce Identity audience |
inferenceVertexWorkforceUserProject | string | Workforce Identity billing project |
inferenceVertexWorkforceOidc | object | Workforce Identity IdP (OIDC) |
organizationPluginsUrl | string | Organization plugins endpoint |
autoModeEnabled | boolean | Allow Auto mode |
inferenceCredentialHelperSilentRefreshEnabled | boolean | Re-run helper for silent refresh |
bootstrapEnabled | boolean | Use bootstrap config |
bootstrapUrl | string | Bootstrap config URL |
bootstrapOidc | object | Bootstrap OIDC parameters |
1.9659
| MDM key | Type | Description |
|---|---|---|
coworkTabEnabled | boolean | Allow Cowork tab |
1.9255
| MDM key | Type | Description |
|---|---|---|
otlpDesktopLogLevel | enum | Desktop telemetry export level |
inferenceFoundryTenantId | string | Entra ID tenant ID |
inferenceFoundryClientId | string | Entra ID client ID |
1.8555
| MDM key | Type | Description |
|---|---|---|
inferenceCredentialKind | enum | Credential kind |
1.8089
| MDM key | Type | Description |
|---|---|---|
inferenceAnthropicApiKey | string | Claude API key |
inferenceCustomHeaders | object | Custom inference headers (renamed from inferenceGatewayHeaders) |
modelDiscoveryEnabled | boolean | Model discovery |
orgPluginSettings | object | Organization plugin settings |
builtinToolPolicy | object | Built-in tool policy |
inferenceCredentialHelperTimeoutSec | integer | Credential helper timeout |
1.7196
| MDM key | Type | Description |
|---|---|---|
banner | object | Organization banner |
1.6889
| MDM key | Type | Description |
|---|---|---|
disableDeepLinkRegistration | boolean | Disable claude:// deep-link handling |
inferenceGatewayOidc | object | Gateway SSO IdP (OIDC) |
1.6259
| MDM key | Type | Description |
|---|---|---|
inferenceBedrockSsoStartUrl | string | AWS SSO start URL |
inferenceBedrockSsoRegion | string | AWS SSO region |
inferenceBedrockSsoAccountId | string | AWS SSO account ID |
inferenceBedrockSsoRoleName | string | AWS SSO role name |
1.5354
| MDM key | Type | Description |
|---|---|---|
otlpResourceAttributes | object | OpenTelemetry resource attributes |
1.5186
| MDM key | Type | Description |
|---|---|---|
inferenceBedrockServiceTier | enum | Bedrock service tier |
1.3834
| MDM key | Type | Description |
|---|---|---|
disableDeploymentModeChooser | boolean | Disable Claude.ai sign-in |
1.3036
| MDM key | Type | Description |
|---|---|---|
inferenceGatewayAuthScheme | enum | Gateway auth scheme |
Baseline
| MDM key | Type | Description |
|---|---|---|
isDesktopExtensionEnabled | boolean | Allow desktop extensions (renamed from isDxtEnabled) |
isDesktopExtensionSignatureRequired | boolean | Require signed extensions (renamed from isDxtSignatureRequired) |
isLocalDevMcpEnabled | boolean | Allow user-added MCP servers |
isClaudeCodeForDesktopEnabled | boolean | Allow Claude Code tab |
coworkEgressAllowedHosts | array<string> | Allowed egress hosts |
otlpEndpoint | string | OpenTelemetry collector endpoint |
otlpProtocol | enum | OpenTelemetry exporter protocol |
otlpHeaders | object | OpenTelemetry exporter headers |
autoUpdaterEnforcementHours | integer | Auto-update enforcement window |
disableAutoUpdates | boolean | Block auto-updates |
inferenceProvider | enum | Inference provider |
inferenceGatewayBaseUrl | string | Gateway base URL |
inferenceGatewayApiKey | string | Gateway API key |
inferenceVertexProjectId | string | GCP project ID |
inferenceVertexRegion | string | GCP region |
inferenceVertexCredentialsFile | string | GCP credentials file path |
inferenceVertexOAuthClientId | string | Vertex OAuth client ID |
inferenceVertexOAuthClientSecret | string | Vertex OAuth client secret |
inferenceVertexOAuthScopes | string | Vertex OAuth scopes |
inferenceVertexBaseUrl | string | Vertex AI base URL |
inferenceBedrockRegion | string | AWS region |
inferenceBedrockBearerToken | string | AWS bearer token |
inferenceBedrockBaseUrl | string | Bedrock base URL |
inferenceBedrockProfile | string | AWS profile name |
inferenceBedrockAwsDir | string | AWS config directory |
inferenceFoundryResource | string | Azure AI Foundry resource name |
inferenceFoundryApiKey | string | Azure AI Foundry API key |
inferenceModels | array<string|object> | Model list |
deploymentOrganizationUuid | string | Organization UUID |
disableEssentialTelemetry | boolean | Block essential telemetry |
disableNonessentialTelemetry | boolean | Block nonessential telemetry |
disableNonessentialServices | boolean | Block nonessential services |
managedMcpServers | array<object|object|object|null> | Managed MCP servers |
disabledBuiltinTools | array<string> | Disabled built-in tools |
allowedWorkspaceFolders | array<string|object> | Allowed workspace folders |
inferenceCredentialHelper | string | Helper script |
inferenceCredentialHelperTtlSec | integer | Helper script TTL |
inferenceMaxTokensPerWindow | integer | Max tokens per window |
inferenceTokenWindowHours | integer | Token cap window |
requireCoworkFullVmSandbox— Require full VM sandbox