Configuration changelog - Claude.ai Documentation

Configuration keys by Claude Desktop release. Each section lists keys added in that release, with the MDM key name (for plist/registry deployment) and the equivalent JSON shape (for local-file or bootstrap remote configuration).

2026-09-11

No configuration changes in this release.

2026-09-10

MDM key	Type	Description
`sshTransport` · Beta	`enum`	SSH connection engine
`chatSessionRetentionDays`	`integer`	Chat retention period
`coworkSessionRetentionDays`	`integer`	Cowork retention period
`codeSessionRetentionDays`	`integer`	Code retention period
`sessionRetentionHold`	`boolean`	Suspend session deletion
`coworkVmIpv6Enabled`	`boolean`	Enable IPv6 in the workspace VM

JSON (e.g. for non-MDM users or Bootstrap):

{
  "codeSurface": {
    "sshTransport": "<auto|system-openssh|builtin>"
  },
  "sessionRetention": {
    "chatDays": "<integer>",
    "coworkDays": "<integer>",
    "codeDays": "<integer>",
    "legalHold": "<boolean>"
  },
  "workspace": {
    "vmIpv6Enabled": "<boolean>"
  }
}

2026-09-08

Changed:

managedMcpServers: the built-in Microsoft 365 server entry ("server": "microsoft365") accepts a new continuousAccessEvaluation value, enabled (the default) or disabled. When enabled, the bundled connector requests Continuous Access Evaluation-capable Microsoft Graph tokens, which live up to about 28 hours but are cut off within minutes when an administrator revokes sessions or disables the account, or, where the tenant enforces a location or compliant-network Conditional Access policy, when the token is used from outside that network; disabled keeps standard one-hour tokens. A change applies to tokens issued after the connector next starts.
microsoftAuthBroker accepts a new required value: Microsoft 365 sign-in fails when the OS sign-in broker (WAM on Windows, the Company Portal SSO extension on macOS) is unavailable instead of falling back to the browser, so the refresh token stays broker-held, and the connector removes the token cache an earlier browser sign-in left on disk. Linux has no broker, so required is not supported there. Earlier releases treat required as disabled (browser-only sign-in), so deploy it once every device is on this release or later.

2026-09-05

No configuration changes in this release.

2026-09-04

No configuration changes in this release.

2026-09-04

No configuration changes in this release.

2026-09-04

MDM key	Type	Description
`sshClientPath` · Beta	`string`	SSH client program
`configRecheckIntervalMinutes`	`integer`	Configuration re-check interval
`disableBypassPermissionsMode`	`boolean`	Disable bypass permissions mode
`blockReadsOutsideWorkingDirectories`	`boolean`	Block reads outside working directories

JSON (e.g. for non-MDM users or Bootstrap):

{
  "codeSurface": {
    "sshClientPath": "<string>"
  },
  "lifecycle": {
    "configRecheckIntervalMinutes": "<integer>"
  },
  "workspace": {
    "disableBypassPermissionsMode": "<boolean>",
    "blockReadsOutsideWorkingDirectories": "<boolean>"
  }
}

Changed:

Breaking: relaunchEnforcementHours moved in the nested served format from bootstrap.relaunchEnforcementHours to lifecycle.relaunchEnforcementHours (beside the new lifecycle.configRecheckIntervalMinutes). This release no longer reads the old path and earlier releases do not read the new one, so move the value under lifecycle; the MDM / flat key name relaunchEnforcementHours is unchanged. The key can now also be set from device management (availability MDM and served), and the default when no tier sets it is 24 hours (was 1).

2026-09-02

No configuration changes in this release.

2026-09-02

No configuration changes in this release.

2026-09-02

MDM key	Type	Description
`inferenceStreamIdleTimeoutSec`	`integer`	Stream idle timeout
`egressProxyUrl`	`string`	Proxy server URL
`egressProxyPacUrl`	`string`	Proxy auto-config (PAC) URL
`claudeAiImport.automatic3pImport`	`boolean`	New subfield (beta): when `true` and `deploymentOrganizationUuid` is set, the app copies this computer’s earlier third-party sessions stored before an organization ID was configured into that organization’s session store, once per device and in the background; independent of `enabled` (default `false`).

JSON (e.g. for non-MDM users or Bootstrap):

{
  "inference": {
    "streamIdleTimeoutSec": "<integer>"
  },
  "workspace": {
    "egressProxyUrl": "<string>",
    "egressProxyPacUrl": "<string>"
  },
  "claudeAiImport": {
    "automatic3pImport": "<boolean>"
  }
}

egressProxyUrl and egressProxyPacUrl are read from device management or a local configuration file only; a value served by a bootstrap URL is not applied.Changed:

Breaking: inferenceModelPricingMultiplier and inferenceModelPricing no longer turn on the Usage page’s cost estimate by themselves; they apply only while inferenceModelPricingEnabled is true and are ignored otherwise. A configuration that sets either without inferenceModelPricingEnabled: true now shows token counts only; add that key to keep the estimate.

2026-08-30

No configuration changes in this release.

2026-08-27

MDM key	Type	Description
`sshHostAllowlist` · Beta	`string[]`	SSH host allowlist
`disableConfigDeprecationWarnings`	`boolean`	Hide configuration deprecation warnings

JSON (e.g. for non-MDM users or Bootstrap):

{
  "codeSurface": {
    "sshHostAllowlist": ["<string>"]
  },
  "bootstrap": {
    "relaunchEnforcementHours": "<integer>"
  },
  "appearance": {
    "disableConfigDeprecationWarnings": "<boolean>"
  }
}

relaunchEnforcementHours is read from served configuration only (a bootstrap URL); a value in a local configuration file or in device management is ignored with a warning.Changed:

inferenceVertexProjectId and inferenceVertexWorkforceUserProject now require the user’s consent when delivered by a bootstrap URL the user configured themselves (consentRequired); a bootstrap URL set by device management, or covered by trustBootstrapDelivery: true, never prompts. Both keys must match the Google Cloud project format (^[a-z0-9][a-z0-9.:-]*$).
inferenceCredentialKind accepts interactive for Vertex AI (Google sign-in); the Vertex oauth value is deprecated (below).
orgPluginSettings is published as an array of { "serverName", "tools": [{ "toolName", "permission" }] } entries; the { "mcpServers": {…} } record form is deprecated (below).
The published bootstrap JSON schema now rejects authorityHost on the Microsoft 365 entry, so a configuration that still uses it fails schema validation in tools that check against the schema; the app itself keeps mapping it to azureCloud until October 7, 2026.
allowedPluginMarketplaces is no longer marked Beta.

Deprecated (each accepted until October 7, 2026, 12:00 PM Pacific Time; users see an in-app warning from September 10, 2026, which disableConfigDeprecationWarnings hides, and a final reminder in the 24 hours before the cut-off, which it does not):

inferenceGatewayHeaders: use inferenceCustomHeaders instead. After the cut-off no custom inference headers are sent.
inferenceCustomHeaders, otlpHeaders, otlpResourceAttributes and bootstrapHeaders written as a "Name=value,…" string or a ["Name: value", …] list: use a JSON object such as {"Name": "value"} instead. After the cut-off a string or list value is rejected as malformed and no headers (or resource attributes) are sent.
inferenceGatewayAuthScheme: "sso": use inferenceCredentialKind: "interactive" instead. After the cut-off the value is reported as invalid and, unless another credential field says how to sign in, the gateway connection has no credential and inference does not start.
inferenceGatewayAuthScheme: "auto": use "bearer" instead, or remove the key (bearer is the default). After the cut-off the value is reported as invalid and the default applies.
inferenceCredentialKind: "oauth" (Vertex AI): use "interactive" instead. After the cut-off oauth is reported as invalid and the kind is derived from the credential fields present.
inferenceCredentialKind: "interactive" together with inferenceVertexWorkforceAudience (Vertex AI): use "workforce" instead, or remove the audience if Google sign-in is meant. After the cut-off the audience no longer implies Workforce Identity; interactive then needs inferenceVertexOAuthClientId or inference does not start.
isDxtEnabled and isDxtSignatureRequired: use isDesktopExtensionEnabled and isDesktopExtensionSignatureRequired instead. After the cut-off the old names are unreadable: extensions are disabled, or only signed extensions load, until the name is updated.
trustBootstrapLocalExec: use trustBootstrapDelivery instead. After the cut-off the key reads false and each user is asked to consent to bootstrap-delivered values.
enduserAttribution: use endUserAttribution instead. After the cut-off the key reads false and end-user attribution stays off.
orgPluginSettings as a { "mcpServers": {…} } record: use the array form instead (read by desktop 1.15200.0 and later; older desktops ignore the array and enforce no tool locks). After the cut-off the record is rejected and every plugin-delivered MCP tool is blocked until the value is rewritten.
ask-session in builtinToolPolicy, orgPluginSettings[].tools[].permission and managedMcpServers[].toolPolicy: use ask instead. After the cut-off it is treated as an unrecognized value: ask for a built-in tool, blocked for a plugin-delivered tool, and an invalid entry for a managed server.
In managedMcpServers entries: replace scopes with scope (one space-separated string); remove transport: "builtin" and source; replace authorityHost with azureCloud: "us-gov-high" for a GCC High tenant; write oauth as true or an oauth object rather than a number or string; replace oauth.scopes (or oauth.scope as a list) with oauth.scope as one string; add transport: "http" (or "sse" / "stdio") to an entry with no transport that is not a built-in server (a built-in Microsoft 365 or GitHub entry takes no transport). After the cut-off such an entry is rejected and that connector is unavailable until it is rewritten (source is ignored by the desktop but refused by a customer-run Apps Gateway).

2026-08-26

No configuration changes in this release.

2026-08-26

No configuration changes in this release.

2026-08-25

No configuration changes in this release.

2026-08-25

MDM key	Type	Description
`inferenceModelPricingEnabled`	`boolean`	Show estimated cost
`inferenceModelPricingMultiplier`	`number`	Price multiplier
`inferenceModelPricing`	`object[]`	Model pricing
`userPluginMarketplacesEnabled`	`boolean`	Allow user-added plugin marketplaces
`userPluginUploadsEnabled`	`boolean`	Allow user-added plugins
`mcpToolTimeoutSec`	`integer`	MCP tool call timeout
`skipWebFetchPreflight`	`boolean`	Skip WebFetch domain check
`organizationInstructions`	`string`	Organization instructions

JSON (e.g. for non-MDM users or Bootstrap):

{
  "models": {
    "pricing": {
      "enabled": "<boolean>",
      "multiplier": "<number>",
      "models": [
        {
          "name": "<string>",
          "inputPerMtok": "<number>",
          "outputPerMtok": "<number>",
          "cacheReadPerMtok": "<number>",
          "cacheWritePerMtok": "<number>"
        }
      ]
    }
  },
  "plugins": {
    "userPluginMarketplacesEnabled": "<boolean>",
    "userPluginUploadsEnabled": "<boolean>"
  },
  "mcp": {
    "toolTimeoutSec": "<integer>"
  },
  "workspace": {
    "skipWebFetchPreflight": "<boolean>",
    "organizationInstructions": "<string>"
  }
}

Changed:

builtinToolPolicy accepts argument-scoped Claude Code permission rules such as Bash(curl *) or Edit(**/*.env) as keys, in addition to bare tool names; WebSearch and WebFetch take the bare name only, and a key that is not a usable rule is dropped with a configuration error. Deploy argument-scoped entries once your whole fleet is on this release: an older build drops an argument-scoped ask entry as an unknown tool, so that tool runs without a prompt.

2026-08-21

No configuration changes in this release.

2026-08-20

No configuration changes in this release.

2026-08-18

MDM key	Type	Description
`bootstrapHeaders`	`object`	Bootstrap request headers
`bootstrapHeadersHelper`	`string`	Bootstrap headers helper script

JSON (e.g. for non-MDM users or Bootstrap):

{
  "bootstrap": {
    "headers": "<object>",
    "headersHelper": "<string>"
  }
}

Changed:

managedMcpServers[].oauth accepts a new mode value, hosted: the app signs in to that MCP server with an Anthropic-hosted client identity (Anthropic vouches for the client on each token request) instead of a client you register yourself, pinned to the exact issuer URL(s) you list in authorizationServer; it requires the Claude.ai sign-in and is available once the hosted signer is enabled for your organization.

2026-08-18

No configuration changes in this release.

2026-08-17

MDM key	Type	Description
`claudeAiImport.exportEnabled`	`boolean`	New subfield: lets users export this computer’s chats, Cowork tasks, and Code sessions from Settings > Import & export as a zip that another install can import; no effect unless `enabled` is `true` (default `false`).
`allowedPluginMarketplaces[].manifestSha256`	`string`	New subfield (beta): SHA-256 of the exact hosted `marketplace.json` a `url` marketplace may serve; required when `installationPreference` is `auto_install` or `required`, and a served manifest with any other digest is refused.

JSON (e.g. for non-MDM users or Bootstrap):

{
  "claudeAiImport": {
    "exportEnabled": "<boolean>"
  },
  "plugins": {
    "marketplaces": [
      {
        "source": "url",
        "url": "<string>",
        "manifestSha256": "<string>",
        "credentialKind": "<anonymous|userGit|credentialHelper|inferenceCredential>"
      }
    ]
  }
}

Changed:

Breaking: Managed-config URL settings now reject values that embed credentials (https://user:password@host…). Configurations that relied on this fail to load until the credentials are removed; use bootstrapHeaders / bootstrapHeadersHelper (available from 1.32885.1) to send authentication instead.
allowedPluginMarketplaces[].source (beta) accepts a new url value: a hosted marketplace.json whose plugins are zip archives, fetched over HTTPS with no git on the device; set url to the manifest address (repo, ref, and path do not apply).
allowedPluginMarketplaces[].credentialKind (beta) accepts a new inferenceCredential value, for url marketplaces on the inference gateway’s own origin: fetches carry the same bearer credential the app already sends the gateway for inference.

2026-08-14

No configuration changes in this release.

2026-08-13

MDM key	Type	Description
`otlpAuthMode`	`enum`	Collector authentication
`otlpHeadersHelper`	`string`	OpenTelemetry headers helper script
`inferenceGatewayOidc.resource`	`string`	New subfield: RFC 8707 resource indicator sent on gateway sign-in and token refresh so the IdP audience-restricts the access token to the gateway; leave unset for Microsoft Entra ID.

JSON (e.g. for non-MDM users or Bootstrap):

{
  "otlp": {
    "authMode": "<none|inference-credential>",
    "headersHelper": "<string>"
  },
  "inference": {
    "credential": {
      "oidc": {
        "resource": "<string>"
      }
    }
  }
}

Changed:

inferenceBedrockBaseUrl and inferenceVertexBaseUrl: only affects users who entered the bootstrap server URL themselves (in Settings or a local config file). Those users are now asked once to allow a Bedrock or Vertex endpoint that server delivers (and again if it changes) before it takes effect, the same trustBootstrapDelivery consent prompt inferenceGatewayBaseUrl already shows; the provider’s default endpoint is used until they allow it. Managed deployments (bootstrap URL set by device management, or trustBootstrapDelivery: true) see no change.

2026-08-11

MDM key	Type	Description
`modelPrefer1mContext`	`boolean`	Default to 1M context
`claudeAiImport.enabled`	`boolean`	New subfield: turns history import on; the banner and import actions stay off until set to `true` (default `false`).
`claudeAiImport.bannerBehavior`	`enum`	New subfield: when the import banner appears: `off` (default), `detect`, or `show`.

JSON (e.g. for non-MDM users or Bootstrap):

{
  "models": {
    "prefer1mContext": "<boolean>"
  },
  "claudeAiImport": {
    "enabled": "<boolean>",
    "bannerBehavior": "<off|detect|show>"
  }
}

Changed:

inferenceGatewayBaseUrl delivered by a bootstrap server now goes through the trustBootstrapDelivery consent prompt: unless the bootstrap URL came from device management or trustBootstrapDelivery is true, each user is asked once to allow the address, and again if it changes, before it takes effect.

2026-08-06

MDM key	Type	Description
`updateViaUpdatesHost`	`boolean`	Check for updates on releases.claude.com
`allowedWorkspaceFolders[].mode`	`enum`	New subfield: `ro` makes the folder read-only in Cowork; Code enforces file tools only.

JSON (e.g. for non-MDM users or Bootstrap):

{
  "autoUpdate": {
    "viaUpdatesHost": "<boolean>"
  }
}

trustBootstrapLocalExec was renamed to trustBootstrapDelivery; the previous name is still accepted.

2026-08-04

MDM key	Type	Description
`inferenceGatewayOidcAuthFlow`	`enum`	Gateway sign-in flow
`inferenceVertexWorkforceAuthFlow`	`enum`	Workforce Identity sign-in flow
`trustBootstrapLocalExec`	`boolean`	Trust bootstrap-delivered local commands
`skillCreationEnabled`	`boolean`	Allow user-created skills

JSON (e.g. for non-MDM users or Bootstrap):

{
  "inference": {
    "credential": {
      "authFlow": "<browser|broker>"
    }
  },
  "bootstrap": {
    "trustBootstrapLocalExec": "<boolean>"
  },
  "workspace": {
    "skillCreationEnabled": "<boolean>"
  }
}

Changed:

claudeAiImport, deploymentDisplayName, and deploymentDisplaySubtitle now accept values from MDM and a local configuration file as well as a bootstrap server, and disableDeepLinkRegistration, microsoftAuthBroker, userContentRendererUrl, inferenceFoundryTenantId, inferenceFoundryClientId, inferenceCredentialHelper (with its TTL, timeout, and silent-refresh keys), inferenceBedrockProfile, inferenceBedrockAwsDir, inferenceBedrockAwsCliPath, and inferenceVertexCredentialsFile can now be delivered by a bootstrap server. The keys that name a local executable go through the trustBootstrapLocalExec consent prompt.
managedMcpServers gains a built-in github server: set server to github and supply your own GitHub OAuth app client ID with the device flow enabled. The new host, toolsets, and readOnly subfields point the connector at a GitHub Enterprise Server instance, choose which toolsets load, and offer read tools only.
managedMcpServers[].oauth.authFlow is a new subfield that lets a managed connector sign in through the operating system’s Microsoft Entra account broker on Windows and macOS, so Conditional Access policies that require a managed device no longer block it. Devices without a broker keep using browser sign-in.
enduserAttribution is renamed to the corrected spelling endUserAttribution. The previous spelling is still accepted and now records a configuration warning.
organizationPluginsUrl is deprecated and removed from the configuration reference. The key is still honored, but organization plugins are better configured with allowedPluginMarketplaces.

2026-08-03

No configuration changes in this release.

2026-07-24

MDM key	Type	Description
`mcpPersistentAlwaysAllowEnabled`	`boolean`	Allow persistent tool approvals

JSON (e.g. for non-MDM users or Bootstrap):

{
  "mcp": {
    "persistentAlwaysAllowEnabled": "<boolean>"
  }
}

2026-07-21

MDM key	Type	Description
`enduserAttribution`	`boolean`	End-user attribution
`userContentRendererUrl`	`string`	Artifact preview iframe origin

JSON (e.g. for non-MDM users or Bootstrap):

{
  "deploymentDisplayName": "<string>",
  "deploymentDisplaySubtitle": "<string>",
  "enduserAttribution": "<boolean>",
  "userContentRendererUrl": "<string>"
}

2026-07-19

No configuration changes in this release.

2026-07-16

MDM key	Type	Description
`otlpTracesEnabled`	`boolean`	Export traces (beta)

JSON (e.g. for non-MDM users or Bootstrap):

{
  "otlp": {
    "tracesEnabled": "<boolean>"
  }
}

2026-07-16

No configuration changes in this release.

2026-07-14

MDM key	Type	Description
`disableFeatureDiscovery`	`boolean`	Hide feature announcements
`inferenceModels[].prefer1m`	`boolean`	New subfield: make the 1M-context variant the default picker selection when this model is the default entry.
`managedMcpServers[].envHelper`	`string`	New subfield: helper executable that prints environment variables as JSON for a managed stdio server.
`managedMcpServers[].envHelperTtlSec`	`integer`	New subfield: maximum age in seconds of a cached `envHelper` result (default 300).
`managedMcpServers[].headersHelperRefreshBufferSec`	`integer`	New subfield: how many seconds before credential expiry the `headersHelper` re-runs (default 60).
`toolSearchEnabled`	`boolean`	Enable tool search

JSON (e.g. for non-MDM users or Bootstrap):

{
  "featureDiscovery": {
    "disabled": "<boolean>"
  },
  "workspace": {
    "toolSearchEnabled": "<boolean>"
  }
}

Changed:

chatTabEnabled and chatAdvancedFileAnalysisEnabled are no longer Beta: the Chat tab and advanced file analysis are generally available. Availability and defaults are unchanged, and both remain opt-in.
orgPluginSettings[].tools.permission accepts a new ask-session value. In this release the value is accepted but behaves as ask (a prompt on every use); the once-per-session approval flow is not yet enabled.

2026-07-14

No configuration changes in this release.

2026-07-09

No configuration changes in this release.

2026-07-07

MDM key	Type	Description
`inferenceFoundryAuthFlow`	`enum`	Entra ID sign-in flow
`microsoftAuthBroker`	`enum`	Microsoft 365 native sign-in broker
`managedMcpServers[].startupTimeoutSec`	`integer`	New subfield: maximum wait in seconds for the server to start and list its tools.

JSON (e.g. for non-MDM users or Bootstrap):

{
  "inference": {
    "credential": {
      "authFlow": "<device-code|browser>"
    }
  },
  "authentication": {
    "microsoftAuthBroker": "<auto|disabled>"
  }
}

Changed:

isDesktopExtensionEnabled — default changed from true to false: Desktop Extensions (.dxt, .mcpb) no longer load unless explicitly enabled.
allowedPluginMarketplaces (beta) — can now be delivered per-user through the bootstrap server; previously MDM-only.

2026-07-07

No configuration changes in this release.

2026-07-02

Removed:

disableDefaultPlugins — third-party deployments always skip the default plugin marketplaces and standard deployments always include them, so the key no longer has an effect.

2026-07-01

No configuration changes in this release.

2026-06-30

MDM key	Type	Description
`allowedPluginMarketplaces`	`object[]`	Admin-configured plugin marketplace git URLs appear under the Directory’s Organization tab. (MDM-only; not settable via bootstrap JSON.)
`inferenceVertexWorkforceOidc.omitOfflineAccess`	`boolean`	New subfield: omit `offline_access` from the OIDC scope request.

JSON (Non-MDM User, Bootstrap Remote):

{
  "inference": {
    "credential": {
      "oidc": {
        "omitOfflineAccess": "<boolean>"
      }
    }
  }
}

2026-06-30

No configuration changes in this release.

2026-06-26

No configuration changes in this release.

2026-06-25

MDM key	Type	Description
`otlpContentCapture`	`enum[]`	Content capture categories
`disableBundledSkills`	`boolean`	Disable bundled skills and workflows
`managedMcpServers[].server`	`enum`	Gained `"websearch"` — managed web search (Brave, Tavily, Exa or custom)

JSON (Non-MDM User, Bootstrap Remote):

{
  "otlp": {
    "contentCapture": [
      "<userPrompts|assistantResponses|toolDetails|toolContent|rawApiBodies>"
    ]
  },
  "workspace": {
    "disableBundledSkills": "<boolean>"
  },
  "mcp": {
    "managedServers": [
      {
        "name": "Web search",
        "server": "websearch",
        "provider": "<brave|tavily|exa|custom>",
        "headers": { "<header-name>": "<string>" },
        "customUrl": "<string, provider=custom only>"
      }
    ]
  }
}

2026-06-23

No configuration changes in this release.

2026-06-18

MDM key	Type	Description
`chatAdvancedFileAnalysisEnabled`	`boolean`	Advanced file analysis
`inferenceSessionLifetimeSec`	`integer`	Sign-in session lifetime

JSON (Non-MDM User, Bootstrap Remote):

{
  "chatSurface": {
    "advancedFileAnalysis": "<boolean>"
  },
  "inference": {
    "sessionLifetimeSec": "<integer>"
  }
}

Deprecated:

betaFeaturesEnabled — Allow beta features (added and deprecated in this release)

2026-06-16

MDM key	Type	Description
`chatTabEnabled`	`boolean`	Allow Chat tab
`inferenceBedrockAwsCliPath`	`string`	AWS CLI path

JSON (Non-MDM User, Bootstrap Remote):

{
  "chatSurface": {
    "enabled": "<boolean>"
  },
  "inference": {
    "awsEnv": {
      "awsCliPath": "<string>"
    }
  }
}

2026-06-11

MDM key	Type	Description
`inferenceVertexOAuthLoginHint`	`string`	Vertex OAuth login hint

JSON (Non-MDM User, Bootstrap Remote):

{
  "inference": {
    "credential": {
      "loginHint": "<string>"
    }
  }
}

2026-06-02

MDM key	Type	Description
`inferenceVertexWorkforceAudience`	`string`	Workforce Identity audience
`inferenceVertexWorkforceUserProject`	`string`	Workforce Identity billing project
`inferenceVertexWorkforceOidc`	`object`	Workforce Identity IdP (OIDC)
`organizationPluginsUrl`	`string`	Organization plugins endpoint
`autoModeEnabled`	`boolean`	Allow Auto mode
`inferenceCredentialHelperSilentRefreshEnabled`	`boolean`	Re-run helper for silent refresh
`bootstrapEnabled`	`boolean`	Use bootstrap config
`bootstrapUrl`	`string`	Bootstrap config URL
`bootstrapOidc`	`object`	Bootstrap OIDC parameters

JSON (Non-MDM User, Bootstrap Remote):

{
  "inference": {
    "credential": {
      "audience": "<string>",
      "userProject": "<string>",
      "oidc": {
        "issuer": "<string>",
        "authorizationUrl": "<string>",
        "tokenUrl": "<string>",
        "clientId": "<string>",
        "scopes": "<string>",
        "redirectPort": "<integer>"
      },
      "silentRefreshEnabled": "<boolean>"
    }
  }
}

2026-05-27

MDM key	Type	Description
`coworkTabEnabled`	`boolean`	Allow Cowork tab

JSON (Non-MDM User, Bootstrap Remote):

{
  "coworkSurface": {
    "enabled": "<boolean>"
  }
}

2026-05-26

MDM key	Type	Description
`otlpDesktopLogLevel`	`enum`	Desktop telemetry export level
`inferenceFoundryTenantId`	`string`	Entra ID tenant ID
`inferenceFoundryClientId`	`string`	Entra ID client ID

JSON (Non-MDM User, Bootstrap Remote):

{
  "otlp": {
    "desktopLogLevel": "<off|error|warn|info|debug>"
  },
  "inference": {
    "credential": {
      "tenantId": "<string>",
      "clientId": "<string>"
    }
  }
}

2026-05-21

MDM key	Type	Description
`inferenceCredentialKind`	`enum`	Credential kind

JSON (Non-MDM User, Bootstrap Remote):

{
  "inference": {
    "credential": {
      "kind": "<static|helper-script|interactive|vendor-profile>"
    }
  }
}

2026-05-19

MDM key	Type	Description
`inferenceAnthropicApiKey`	`string`	Claude API key
`inferenceCustomHeaders`	`object`	Custom inference headers (renamed from `inferenceGatewayHeaders`)
`modelDiscoveryEnabled`	`boolean`	Model discovery
`orgPluginSettings`	`object`	Organization plugin settings
`builtinToolPolicy`	`object`	Built-in tool policy
`inferenceCredentialHelperTimeoutSec`	`integer`	Credential helper timeout

JSON (Non-MDM User, Bootstrap Remote):

{
  "inference": {
    "credential": {
      "apiKey": "<string>",
      "timeoutSec": "<integer>"
    },
    "customHeaders": "<object>"
  }
}

2026-05-12

MDM key	Type	Description
`banner`	`object`	Organization banner

2026-05-08

MDM key	Type	Description
`disableDeepLinkRegistration`	`boolean`	Disable claude:// deep-link handling
`inferenceGatewayOidc`	`object`	Gateway SSO IdP (OIDC)

JSON (Non-MDM User, Bootstrap Remote):

{
  "inference": {
    "credential": {
      "oidc": {
        "issuer": "<string>",
        "authorizationUrl": "<string>",
        "tokenUrl": "<string>",
        "clientId": "<string>",
        "scopes": "<string>",
        "redirectPort": "<integer>",
        "bearerTokenType": "<id_token|access_token>",
        "appendOfflineAccess": "<boolean>"
      }
    }
  }
}

2026-05-05

MDM key	Type	Description
`inferenceBedrockSsoStartUrl`	`string`	AWS SSO start URL
`inferenceBedrockSsoRegion`	`string`	AWS SSO region
`inferenceBedrockSsoAccountId`	`string`	AWS SSO account ID
`inferenceBedrockSsoRoleName`	`string`	AWS SSO role name

JSON (Non-MDM User, Bootstrap Remote):

{
  "inference": {
    "credential": {
      "ssoStartUrl": "<string>",
      "ssoRegion": "<string>",
      "ssoAccountId": "<string>",
      "ssoRoleName": "<string>"
    }
  }
}

2026-04-29

MDM key	Type	Description
`otlpResourceAttributes`	`object`	OpenTelemetry resource attributes

JSON (Non-MDM User, Bootstrap Remote):

{
  "otlp": {
    "resourceAttributes": "<object>"
  }
}

2026-04-28

MDM key	Type	Description
`inferenceBedrockServiceTier`	`enum`	Bedrock service tier

JSON (Non-MDM User, Bootstrap Remote):

{
  "inference": {
    "serviceTier": "<flex|priority>"
  }
}

2026-04-21

MDM key	Type	Description
`disableDeploymentModeChooser`	`boolean`	Disable Claude.ai sign-in

2026-04-16

MDM key	Type	Description
`inferenceGatewayAuthScheme`	`enum`	Gateway auth scheme

JSON (Non-MDM User, Bootstrap Remote):

{
  "inference": {
    "credential": {
      "authScheme": "<auto|x-api-key|bearer|sso>"
    }
  }
}

MDM key	Type	Description
`isDesktopExtensionEnabled`	`boolean`	Allow desktop extensions (renamed from `isDxtEnabled`)
`isDesktopExtensionSignatureRequired`	`boolean`	Require signed extensions (renamed from `isDxtSignatureRequired`)
`isLocalDevMcpEnabled`	`boolean`	Allow user-added MCP servers
`isClaudeCodeForDesktopEnabled`	`boolean`	Allow Claude Code tab
`coworkEgressAllowedHosts`	`array<string>`	Allowed egress hosts
`otlpEndpoint`	`string`	OpenTelemetry collector endpoint
`otlpProtocol`	`enum`	OpenTelemetry exporter protocol
`otlpHeaders`	`object`	OpenTelemetry exporter headers
`autoUpdaterEnforcementHours`	`integer`	Auto-update enforcement window
`disableAutoUpdates`	`boolean`	Block auto-updates
`inferenceProvider`	`enum`	Inference provider
`inferenceGatewayBaseUrl`	`string`	Gateway base URL
`inferenceGatewayApiKey`	`string`	Gateway API key
`inferenceVertexProjectId`	`string`	GCP project ID
`inferenceVertexRegion`	`string`	GCP region
`inferenceVertexCredentialsFile`	`string`	GCP credentials file path
`inferenceVertexOAuthClientId`	`string`	Vertex OAuth client ID
`inferenceVertexOAuthClientSecret`	`string`	Vertex OAuth client secret
`inferenceVertexOAuthScopes`	`string`	Vertex OAuth scopes
`inferenceVertexBaseUrl`	`string`	Vertex AI base URL
`inferenceBedrockRegion`	`string`	AWS region
`inferenceBedrockBearerToken`	`string`	AWS bearer token
`inferenceBedrockBaseUrl`	`string`	Bedrock base URL
`inferenceBedrockProfile`	`string`	AWS profile name
`inferenceBedrockAwsDir`	`string`	AWS config directory
`inferenceFoundryResource`	`string`	Azure AI Foundry resource name
`inferenceFoundryApiKey`	`string`	Azure AI Foundry API key
`inferenceModels`	`array<string\|object>`	Model list
`deploymentOrganizationUuid`	`string`	Organization UUID
`disableEssentialTelemetry`	`boolean`	Block essential telemetry
`disableNonessentialTelemetry`	`boolean`	Block nonessential telemetry
`disableNonessentialServices`	`boolean`	Block nonessential services
`managedMcpServers`	`array<object\|object\|object\|null>`	Managed MCP servers
`disabledBuiltinTools`	`array<string>`	Disabled built-in tools
`allowedWorkspaceFolders`	`array<string\|object>`	Allowed workspace folders
`inferenceCredentialHelper`	`string`	Helper script
`inferenceCredentialHelperTtlSec`	`integer`	Helper script TTL
`inferenceMaxTokensPerWindow`	`integer`	Max tokens per window
`inferenceTokenWindowHours`	`integer`	Token cap window

Deprecated:

requireCoworkFullVmSandbox — Require full VM sandbox