Home Docs Claude Documentation

One capture · claude-docs

One read of Claude Documentationclaude-docs-20261110T213709Z

7 pages moved out of 289 read.

Pages moved 7 significant first

Pages read 289 in this capture

Captured 10 Nov 2026 21:37 UTC

Corpus hash cd4ca9777be9 corpus-hash

What this read moved

1-7 of 7

claude-science/get-started Changed · +7 / -5 lines

from line 98

9898

9999## Uninstall Claude Science

100100

101Uninstalling removes the application and keeps your data folder. Your projects, artifacts, and conversation history stay on your computer until you delete that folder.

101Uninstalling removes the application and keeps your data folder. Your projects, artifacts, and conversation history stay on your computer until you delete that folder or, on Windows, run `claude-science uninstall --purge`.

102102

103103> [!WARNING]

104104>

105> Deleting the data folder (`~/.claude-science`, or `%USERPROFILE%\.claude-science` on Windows) removes all your projects, artifacts, conversation history, environments, and settings, and signs you out. Copy anything you want to keep first, with **Download** on an artifact or by copying the project's folder from inside the data folder.

105> Deleting the data folder (`~/.claude-science`, or `%USERPROFILE%\.claude-science` on Windows) removes all your projects, artifacts, conversation history, environments, and settings, and signs you out. You can't restore your work from your Claude account, so copy any files you want to keep before you delete the folder. Use **Download** on an artifact, or copy the project's folder from inside the data folder. Conversations aren't in a project's folder. To keep them, don't delete the data folder or the folder shown under **Settings > Storage > Data location**.

106106>

107107> Before you uninstall, check where your data is under **Settings > Storage > Data location**. If it shows a folder other than the default, the default folder still holds your environments and your sign-in, and it can also hold projects from before that location was set. To remove all your data:

108108>

from line 135

135135>

136136> **2. Uninstall the app**

137137>

138> In Windows **Settings**, go to **Apps > Installed apps** and uninstall **Claude Science**, or run `claude-science uninstall` in a terminal.

138> In Windows **Settings**, go to **Apps > Installed apps** and uninstall **Claude Science**, or run `claude-science uninstall` in a terminal. Both keep your data.

139139>

140> To remove the app and your data together, use `claude-science uninstall --purge` instead. It deletes the whole folder your data location points to, including anything you stored there yourself, so move those files out first.

140> > [!WARNING]

141> >

142> > `claude-science uninstall --purge` removes the app and permanently deletes your projects, artifacts, and conversation history, along with everything else in the folder that **Data location** shows, including your own files. It doesn't ask you to confirm, and the files don't go to the Recycle Bin. To keep your work, leave out `--purge`.

141143>

142> When your data location isn't `%USERPROFILE%\.claude-science`, `--purge` leaves that folder in place. It still holds your environments and your sign-in, and it can also hold projects from before that location was set. To remove those too, delete `%USERPROFILE%\.claude-science` yourself.

144> When your data location isn't `%USERPROFILE%\.claude-science`, `--purge` leaves `%USERPROFILE%\.claude-science` in place. It still holds your environments and your sign-in, and it can also hold projects from before that location was set. To remove those too, delete `%USERPROFILE%\.claude-science` yourself.

143145

144146> [tab] Linux

145147>

claude-science/manage-on-devices Changed · +5 / -1 lines

from line 15

1515

1616On Windows and macOS, the program is in these places:

1717

18* **Windows**: the program itself installs per user to `%LOCALAPPDATA%\Programs\ClaudeScience` and registers under the signed-in user's **Settings** > **Apps** > **Installed apps** rather than machine-wide. The app also writes launch logs and state to `%LOCALAPPDATA%\ClaudeScience` and keeps a sandbox state folder under `%LOCALAPPDATA%`, and it unpacks components it runs, such as the app window engine and the sandbox launcher, under the data folder, so allow-listing by path needs both the program folder and the data folder. Uninstalling removes the program and sandbox state; `claude-science uninstall --purge` also removes the data and state folders.

18* **Windows**: the program itself installs per user to `%LOCALAPPDATA%\Programs\ClaudeScience` and registers under the signed-in user's **Settings > Apps > Installed apps** rather than machine-wide. The app also writes launch logs and state to `%LOCALAPPDATA%\ClaudeScience` and keeps a sandbox state folder under `%LOCALAPPDATA%`, and it unpacks components it runs, such as the app window engine and the sandbox launcher, under the data folder, so allow-listing by path needs both the program folder and the data folder. Uninstalling from Windows **Settings**, with `claude-science uninstall`, or with the uninstall entry's `QuietUninstallString` removes the program and sandbox state and keeps the data directory and `%LOCALAPPDATA%\ClaudeScience`.

1919* **macOS**: the app is **Claude Science** in the **Applications** folder, or in the **Applications** folder inside the member's home folder. When Claude Science opens in a browser tab, it runs its program from a copy at `~/.claude-science/bin/claude-science`. When it opens in its own window, it runs the program from inside the app. In its own window, Claude Science also keeps window settings, logs, and the window's page storage, which includes unsent message drafts, in `~/Library/Application Support/Claude Science` (see [Macs where Claude Science opens in its own window](#macs-where-claude-science-opens-in-its-own-window)).

2020

2121Your endpoint tooling governs these folders the same way it governs any other local application data. Anthropic doesn't host a copy of these folders, so Custom Data Retention and Org Data Export don't reach them. [How Claude Science works with your data](https://claude.com/docs/claude-science/how-claude-science-works-with-your-data.md) covers what Anthropic does receive from the app, including the session transcripts available to Enterprise organizations with the Compliance API enabled.

23> [!WARNING]

24>

25> On Windows, `claude-science uninstall --purge` removes the program and deletes the data directory and `%LOCALAPPDATA%\ClaudeScience`, with everything in them, without asking to confirm. If the data directory was moved, it's deleted where it is now, and the default data folder stays. Leave `--purge` out of removal scripts unless you want to delete the member's work.

2226

2327## Deploy configuration with device management

2428

cowork/changelog Changed · +77 / -0 lines

This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.

from line 2

33> Release notes for Claude Desktop

5**v5.1231.0**

72026-11-10

9Bundled Claude Code version: 2.1.321.

11**General**

13* Added run status to scheduled tasks that run on your computer, in Cowork and Code. A task's card can now say "Last run failed", "Last run failed, will try again", "Needs input" or "Didn't run", or why a run that is due hasn't started, such as "Waiting for its previous run to finish".

14* Changed Claude on Windows so that it can stop at launch with the message "Claude could not start" when another program keeps using a file that Claude needs. When Windows starts Claude at sign-in, it stops with no message. Close other programs or restart the computer, then open Claude again.

15* Changed Claude on Windows to keep its data in `%LOCALAPPDATA%\Claude-Data`: new installs start there (Windows 10 21H2 or later and Windows Server 2022, as on Windows 11), and existing data moves there on Windows 10 21H2 or later. The Microsoft Store version and third-party deployments are unchanged.

16* Changed computer use on Windows to need the "Use system shortcuts" permission before it presses the Windows key with Tab, a number key or a symbol key.

17* Changed file opening to refuse Windows file types that install or apply something at a double click (.msix, .appx, their bundles and encrypted forms, .msu, .ppkg, .xbap, .gadget, .sct, themes, styles and troubleshooter packs).

18* Fixed a file sometimes being lost on Windows when two files with the same name were saved to Downloads at the same moment.

19* Fixed an artifact in the side panel reloading when reopened within a few minutes of using Refresh on it, which could lose unsaved edits.

20* Fixed an occasional crash on Linux when typing after the built-in browser was hidden.

21* Fixed Claude being unable to read or act on pages in the built-in browser for some signed-in accounts until they signed out and in again.

22* Fixed Claude Setup refusing to install with "Trusted app installs must be enabled" on Windows 11 24H2 and later where Windows itself allows the install. When Windows blocks apps from outside the Microsoft Store, the message now also gives the address of the Windows deployment guide.

23* Fixed emailed sign-in links doing nothing when clicked again after a failed sign-in attempt.

24* Fixed Run on startup not starting Claude at sign-in on Windows (Microsoft Store and other MSIX installs).

25* Fixed scheduled task notifications saying "Scheduled task completed" when the run went on without a step. They now say "Scheduled task skipped a step" when the step needed your approval and nobody was there to give it, or "A safety check blocked a step" in Auto mode.

26* Fixed the first "Sign in again" after a launch not renewing the Code tab's and Cowork's saved credentials.

27* Fixed the saved sign-in being lost when a proxy answered its renewal with a "200 OK" of its own, and sessions failing to start while still signed in when a proxy or Wi-Fi portal answered a sign-in renewal with a web page.

28* Fixed the window staying blank for a long time after a page stopped responding, on Windows and macOS.

30**Code**

32* Changed MCP servers added in the desktop app, desktop extensions included, to follow the MCP allow list, deny list and plugins-only setting in an administrator's Claude Code managed settings, in Code sessions on this computer. The session's MCP list says which servers are kept out.

33* Changed SSH sessions on Mac and Linux behind several jump hosts: once a jump host has asked you for a password or code in this version, a dropped session no longer redials it over and over. It retries rarely and tells you to sign in.

34* Changed the app on third-party deployments to stop updating your checked-out base branch in the background after it makes a worktree for a session. Use `git pull` to update that branch.

35* Changed worktree sessions on SSH and WSL hosts: a folder whose `.git` Git can't use is now refused in most cases, and the card says why. Such a session used to start without a worktree.

36* Fixed an SSH session that could miss a new sign-in made while the app was re-attaching to it, and stop later with an authentication error.

37* Fixed deleting a session leaving files on disk: the oldest of over 1,700 earlier conversations, saved command output and temporary files after Claude moved to another folder mid-session, and on Windows the conversation file after the app had moved its data to a new folder by copying it.

38* Fixed file edits on network paths (UNC shares, WSL folders, `/net` mounts) that could change only the first of several matches, replace a whole file, or delete or overwrite a notebook's first cell.

39* Fixed pull request status, checks, and auto-fix failing with "HTTP 401" for GitHub Enterprise Server hosts behind an authenticating proxy that the GitHub CLI can pass.

40* Fixed running sessions staying in Auto mode after a device policy turned it off, and added a notice when Claude Code takes a session out of auto mode on its own, saying if an admin's policy did it, or that the app couldn't check why.

41* Fixed the automatic local cleanup on Windows not removing older sessions' records and unsent messages from folders that an earlier move of the app's data left behind, for organizations with the Claude Code + Cowork HIPAA configuration.

42* Fixed the Code tab freezing when many sessions are open.

44**Cowork**

46* Changed Cowork so that edits Claude makes to a session's CLAUDE.md no longer update your global instructions. To change them, use Settings.

47* Fixed a comment you were typing on a file being lost when Claude sent an updated version of that file.

48* Fixed a crash when many pending approval requests closed at once.

49* Fixed an earlier Cowork task not opening, with no message, on a computer that can't run Cowork. The task now opens read-only and says why.

50* Fixed Automatically approve not switching on in a Cowork task right after you pick a model that can run Auto. The switch now works at once, without sending a message first.

51* Fixed prompts in imported sessions: "Go back" on the first-message prompt showed your message as sent instead of returning it to the message box, and "Continue" or "Trust and resume" could send an earlier message a second time if the prompt was left unanswered and the session reopened.

52* Fixed the automatic local cleanup on Windows not removing older tasks, uploads and cached project copies from folders that an earlier move of the app's data left behind, for organizations with the Claude Code + Cowork HIPAA configuration.

53* Fixed your own message losing characters such as underscores and asterisks when copied with its Copy button and pasted back into an empty message box.

55**3P**

57* Added "Allow for 30 days" to the prompt shown before a scheduled Cowork task deletes files in one of its own folders. Later runs can then delete there without asking. `mcpScheduledTaskApprovalLifetimeDays` sets the number of days, and `0` turns the option off.

58* Added `organizationAnnouncement`: a message from your organization that each person can close, shown as a card on the start screen or as a dialog. It shows again when you change its `id`, or its text if it has no `id`. Update all devices before you put it in a device profile.

59* Added a warning when other Claude Code managed settings on a computer override this app's policy there. The diagnostic report shows it with the fix, local Code sessions show a notice, and your OTLP collector gets an event.

60* Changed `autoModeEnabled` set to `false` through device management to take effect without a restart. At the app's next configuration check (every 10 minutes by default), running Cowork tasks and Code sessions, except WSL sessions, leave Auto mode and say so.

61* Changed `claudeAiImport.automatic3pImport` to keep Cowork projects' descriptions and folders, and Cowork sessions' folders. The folders are connected again without asking the person, so Cowork can read and change their files as before the move. Copies made by earlier versions don't get them back.

62* Changed `managedMcpServers`: a local server can leave out its own `command` if `platformOverrides` names only `win32`, `darwin` or `linux`, each with a `command`. It runs only on those systems. Update all devices first: older versions drop it, and block plugins' MCP tools if that empties the list.

63* Changed Code sessions on Windows under an organization's configuration to ask before starting a project's dev server in the Auto and Bypass permission modes, as on macOS and Linux.

64* Changed Cowork tasks in Auto mode to wait for Auto mode's check before each shell command, usually one more request to your provider. A command that the check blocks, or cannot check, does not run.

65* Changed each model ID in `inferenceModels` to allow only the version it names, so `claude-opus-5` no longer also allows `claude-opus-5-5`. On the Claude API, a list of only retired Opus 4 or 4.1 models no longer starts sessions. List a current model.

66* Changed scheduled tasks to retry a run that fails on a server error from your provider or gateway, such as 500 or 529, before Claude responds. Retries end six hours after the first failure. One refused token renewal no longer ends a sign-in through your gateway or identity provider.

67* Changed sessions and scheduled tasks saved on a model that `inferenceModels` doesn't list to run on the default model, which is the first model in the list.

68* Changed Sign in with Google on Vertex AI: hooks, MCP servers on the computer and commands in the Code tab that call Google Cloud now need the person's own Google Cloud credentials on that computer, for example from `gcloud auth application-default login`.

69* Changed the credential, client-secret, headers and environment helpers set in managed configuration to start in `/` on macOS and Linux and in `System32` on Windows. A helper that reads or writes a file by a relative path must now use its full path.

70* Changed what an unset `desktopHome` does where only Code is on. Versions 4.4212.0 to 4.23118.1 turn on Unified Claude there from 12:00 PM PT on November 10. This version waits until 12:00 PM PT on December 17, 2026. To keep only Code, set `desktopHome` to `off` wherever your settings come from.

71* Removed the "Open external link" confirmation for most links to other websites, on third-party deployments too. It still shows for some links, such as private IP addresses, names ending in .local or .internal, punycode (xn--) host names, and email or phone links. No setting brings it back.

72* Removed the Chat, Cowork and Advanced file analysis switches from the Setup window, starting 12:00 PM PT on November 10, 2026. The Unified Claude switch, which sets `desktopHome`, takes their place.

73* Fixed `claudeAiImport.automatic3pImport` dropping project pins, sidebar groups and artifacts' earlier versions, and copying nothing when the computer had no earlier sessions. Computers moved by an earlier version get these once, at their next launch. Scheduled tasks copied then run if they were on.

74* Fixed a saved provider API key on macOS not being read at launch when the first of two keychain prompts was closed and the second was answered, or when a device management tool opened Claude with the root account's home folder.

75* Fixed Auto mode blocking every action it checks in sessions on a Fable or Mythos model when the model list has no Sonnet 5 and no Opus entry tagged with `anthropicFamilyTier`. The check now uses a listed Opus 4.5 or newer.

76* Fixed connector tools set to `ask` in `toolPolicy` not showing an approval prompt in Auto mode on devices with their own Claude Code managed settings. They now ask, so unattended scheduled runs stop at them.

77* Fixed connectors losing their sign-in when the sign-in server was slow to answer a token renewal or did not answer it. The Connectors page could also stay loading in that case.

78* Fixed Cowork tasks and chats showing "Claude Code crashed" when your organization's managed settings for Claude Code, such as a minimum version, stop it from starting. They now show "Claude Code couldn't start" and the reason.

79* Fixed new Code sessions starting on the model and effort of the folder's last session when `alwaysStartWithDefaultModel` is on. They now start on the default model and effort.

80* Fixed the token limit set with `inferenceMaxTokensPerWindow` not counting the tokens that subagents and conversation compaction use. People now reach the limit sooner, most of all in tasks that use subagents.

582**v4.23118.1**

683

7842026-11-09

from line 2493

24162493* Fixed failed mid-turn message sends (for example, while offline) dropping your text instead of returning it to the input.

24172494* Fixed new session worktrees branching from the currently checked-out branch instead of the repository's default branch, and archived sessions leaving their worktree folders on disk.

24182495

2419**Cowork**

2420

2421* Fixed a crash when resuming sessions with malformed remote connector data on disk.

2422* Fixed the workspace download restarting from zero after a network interruption; it now resumes from where it left off and retries automatically.

2423* Fixed folder and file names containing a dollar sign being misread, which broke file references.

2424* Fixed dictation immediately dropping back to the text input in existing sessions.

2425* Fixed an error caused by Claude trying to read a document creation skill that was not available.

2426* Fixed clicking a built-in workflow (such as `deep-research`) in the activity panel's Skills section showing an empty drawer instead of its name and source.

2427

2428**3P**

2429

2430* Added the `allowedPluginMarketplaces` managed configuration key. Configured git repositories appear under the Directory's Organization tab.

2431* Added an optional `omitOfflineAccess` subfield to the `inferenceVertexWorkforceOidc` configuration. Enable it when an identity provider rejects the `offline_access` scope; the app then prompts for sign-in each time the identity provider token expires instead of refreshing silently.

2432* Added managed configuration support on Linux: administrators can provision settings in a root-owned `/etc/claude-desktop/managed-settings.json`, validated against the same schema as the macOS and Windows sources.

2433* Fixed claude.ai sign-in never completing on Windows when an enterprise inference provider is configured.

2434* Fixed subagents failing with an invalid model error on third-party inference providers.

2435* Fixed `inferenceModels[].supports1m` being ignored, restoring the 1M-context option in the model picker for Bedrock, Vertex, Foundry, and gateway providers.

2436* Fixed the Microsoft 365 connector showing an unexpected admin-consent prompt after updating on tenants with restrictive consent policies when the connector's Access setting was blank. Also updated the bundled connector with tools to read the signed-in user's profile and draft reply-all emails.

2437* Improved expired sign-in handling for third-party inference providers and connectors: a sign-in prompt now appears whichever credential type expired, connector authentication errors are shown in Settings and inline in chat with a Reconnect action, and background Code sessions stay signed in across a credential refresh.

2438* Fixed several connector reliability issues: connectors silently stopping mid-session after an OAuth refresh failed instead of prompting to reconnect, connectors configured with both OAuth sign-in and custom headers failing to connect, and admin-configured connectors not appearing in a session until they were signed in.

2439

2440**v1.15962.2**

2441

24422026-06-30

2443

2444**General**

2445

2446* Updated the embedded Claude Code engine to the latest version.

2447

2448**Code**

2449

2450* No user-facing changes.

2451

2452**Cowork**

2453

2454* No user-facing changes.

2455

2456**3P**

2457

2458* No user-facing changes.

2459

2460**v1.15962.1**

2461

24622026-06-26

2463

2464**General**

2465

2466* No user-facing changes.

2467

2468**Code**

2469

2470* No user-facing changes.

2471

2472**Cowork**

2473

2474* No user-facing changes.

2475

2476**3P**

2477

2478* Fixed locally-configured stdio MCP servers being refused in third-party deployments that don't use MDM.

2479* Fixed third-party MCP connectors disconnecting on every app restart when the OAuth provider returns a non-standard refresh response.

2480* Fixed Microsoft 365 brokered sign-in failing with "No reply address provided" on managed Macs.

2481

2482**v1.15962.0**

2483

24842026-06-25

2485

2486**General**

2487

2488* Fixed a crash on launch caused by an unusually large saved session.

2489* Fixed the conversation jumping and the Progress panel flashing when opening a completed task.

2490* Improved keyboard navigation: a message's action buttons are now a single Tab stop, with arrow keys to move between them.

2491

2492**Code**

2493

2494* Fixed high background CPU usage when several Code sessions were open in the same large repository.

2495* Fixed people without a Claude Code seat being sent to the marketing site from `/code`; they now see an in-app organization switcher.

2496* Added support for custom cron expressions when scheduling local routines.

2497* Added "Open in VS Code", "Open in Cursor", and similar actions to the file panel, file tree, plan panel, titlebar, and sidebar in SSH sessions.

2498* Fixed attachment cards for files that exist only inside a session doing nothing when clicked; they now open in the File pane, lightbox, Preview pane, or Files browser.

2499* Added a "Load more" button to the All sessions list for people with many sessions.

2500

2501**Cowork**

2502

2503* Fixed workspace setup repeatedly failing with the same checksum error after a corrupted download, until the cache was cleared.

2504* Fixed Cowork sessions losing their project after restarting the app.

2505* Added a one-time prompt before Claude runs a dynamic workflow, explaining what workflows do.

2506* Improved the time it takes to start a session.

2507

2508**3P**

2509

2510* Added a managed `websearch` built-in tool so self-hosted deployments can search the web. Admins configure Brave, Tavily, Exa, or a custom endpoint in managed config, and it is available in both the Cowork and Code tabs.

2511* Added an `otlpContentCapture` managed setting that lets admins opt in to sending specific categories of unredacted content — user prompts, assistant responses, tool inputs, tool outputs, and raw API request/response bodies — to their OTLP collector.

2512* Updated the Microsoft 365 built-in connector's `scope` field to accept `MailboxSettings.Read`.

2513* Fixed managed connectors that lost their connection staying broken with failing tool calls; they now reconnect automatically on the next tool call, including from newly started conversations, and show a message if reconnecting fails.

2514* Fixed Microsoft 365 connector sign-in failing on Windows because of a broker error.

2515* Fixed a sign-in loop when your organization's gateway denies access; the app now shows "Access denied" and points you to your administrator.

2516* Fixed the selected model reverting after restarting the app and resuming a session.

2517* Added a `disableBundledSkills` managed config key that turns off Claude Code's bundled skills and workflows (such as `deep-research`) on that device.

2518

2519**v1.15200.0**

2520

25212026-06-23

2522

2523**General**

2524

2525* No user-facing changes.

2526

2527**Code**

2528

2529* Added an inline card for multiple-choice questions from Claude, so you can pick an option and step through each question before your choices are sent as a single reply.

2530* Fixed the app crashing shortly after opening the Code tab when local session history files are very large.

2531* Fixed the integrated terminal eventually failing to open new shells after the app had been running for several days on macOS.

2532* Fixed forked sessions not carrying over pull requests from the original conversation, and pull request rows staying marked as closed after being reopened on GitHub.

2533* Fixed the @-mention dropdown, side-chat panel, and plan-comment popover rendering, resizing, and dismissing in the wrong window when a session is opened in its own window.

2534* Fixed an extra tab opening in the system browser when navigating with the Artifacts pane open.

2535

2536**Cowork**

2537

2538* Added the ability to delete Cowork sessions from the sidebar, recents, and Spaces views.

2539

2540**3P**

2541

2542* Published the v2 bootstrap-response JSON schema (nested format). The v1 flat schema remains supported.

2543* Removed support for installing connector extensions from local `.mcpb` and `.dxt` files.

2544* Fixed the Setup panel being locked when only the auto-update policy was deployed via MDM.

2545* Fixed connectors configured by your organization not appearing until restart after first sign-in.

2546* Fixed the model picker dropping to "Default model" mid-session when a gateway's model-list response was temporarily degraded.

2547

2548**v1.14271.0**

2549

25502026-06-18

2551

2552**General**

2553

2554* Fixed the app prompting you to sign in again every day when your claude.ai session was more than a day old.

2555* Fixed Claude Design links in chat navigating the app in place instead of opening Claude Design.

2556* Fixed the app showing a blank window when a network proxy redirects the connection to Claude.

2557

2558**Code**

2559

2560* Changed routines to count against your regular usage limits instead of a separate daily included-run limit, and removed the included-runs indicator.

2561* Updated the model picker to show restricted models as non-selectable with an explanatory badge, and to reflect your organization's allowed default model.

2562* Fixed HTML and SVG file previews showing black text on a dark background in dark mode.

2563* Fixed menus and popovers opening behind the preview panel.

2564

2565**Cowork**

2566

2567* Fixed Claude in Chrome file uploads failing for files in the session's shared folders and outputs.

2568* Fixed scheduled tasks leaving earlier processes running after each scheduled run.

2569* Fixed Windows file paths showing garbled characters in the folder access approval card, and reduced unnecessary folder access denials when allowed workspace folders are configured.

2570

2571**3P**

2572

2573* (breaking) Changed the `chatCodeExecutionEnabled` managed configuration key to `chatAdvancedFileAnalysisEnabled`. It still lets Claude analyze attached files such as spreadsheets and presentations by running code in a sandbox scoped to the session's attachments, and remains off by default. Update any managed configuration that sets the old key.

2574* Deprecated the `betaFeaturesEnabled` managed configuration key; use the per-feature keys `chatTabEnabled` and `chatAdvancedFileAnalysisEnabled` instead. The Beta label in the Setup window is now informational only, and the Beta label has been removed from the built-in Microsoft 365 connector presets.

2575* Added the `inferenceSessionLifetimeSec` managed configuration key. Set it to your identity provider's session lifetime to show users a re-authenticate reminder before their sign-in expires.

2576* Added `~` and environment variable expansion (such as `%APPDATA%` and `%OneDriveCommercial%`) to the `allowedWorkspaceFolders` setting, so folder paths can vary per user.

2577* Added a per-folder pre-select option to `allowedWorkspaceFolders` so an administrator-configured folder can appear as a ready chip when users start a new task, and removed the "Create workspace folder?" prompt for administrator-configured folders.

2578

2579**v1.13576.0**

2580

25812026-06-16

2582

2583**General**

2584

2585* Improved find-in-page to search the entire session transcript instead of only the text scrolled into view, and the find bar now reliably takes keyboard focus when opened.

2586* Added a unified Artifacts view that lists your chat, Code, and Cowork artifacts in one searchable place, with a "New artifact" menu and a "Filter by" control to narrow the list by source.

2587* Fixed keyboard shortcut conflicts failing silently. Assigning a shortcut already held by another app now tells you and keeps your previous shortcut working, and Quick Entry registration errors now appear in Settings.

2588* Fixed the first-run notification explaining that Claude keeps running in the notification area never appearing on Windows.

2589

2590**Code**

2591

2592* Added running dev servers to the Background tasks panel, with stop and open-preview actions.

2593* Improved the Code file viewer: images, video, and audio now play inline instead of showing as text, and Markdown, CSV, and image files refresh automatically when Claude edits them.

2594* Updated the model picker. The three headline models appear at the top level with older models and context-size variants under "More models", each model shows a capability description, and currently-unavailable models appear disabled instead of failing when selected.

2595* Updated the in-session artifact panel: switch between a session's published artifacts from the title dropdown, see when an artifact was last updated, copy a share link, and open, share, or delete the artifact from the overflow menu.

2596* Changed the Code sessions tab from "Projects" to "All sessions". It now lists your non-project sessions alongside project sessions and adds a multi-select Environment filter.

2597* Fixed pull request status checks. Failures now show a small warning indicator on the branch row instead of repeated error popups, the "status couldn't be checked" warning appears less often and can always be dismissed, and only GitHub CLI sign-in problems still raise a notification.

2598

2599**Cowork**

2600

2601* Fixed corrupt plugin downloads crashing or hanging the app.

2602* Fixed skills sometimes staying on an older version after being edited until toggled off and on.

2603

2604**3P**

2605

2606* Added the Chat tab as a beta feature controlled by the `chatTabEnabled` managed configuration key. The separate `chatCodeExecutionEnable

2496**Cowo

third-party/claude-desktop/configuration Changed · +122 / -69 lines

### `organizationAnnouncement`

from line 154

from line 340

339340>

340341> SOCKS proxies and embedded credentials (`user:pass@`) are rejected.

341342>

342> This is an app-behavior key, like `disableAutoUpdates`. If your MDM profile holds nothing but such keys, the app reads them all from that profile alone, so put every one you use there.

343> It is an app-behavior key. If your MDM profile holds only such keys, a user's or bootstrap server's value for one is ignored: put all you use there.

343344

344345***

345346

from line 366

365366>

366367> What `egressProxyUrl` lists as not sent through its proxy skips the PAC file too.

367368>

368> This is an app-behavior key, like `disableAutoUpdates`. If your MDM profile holds nothing but such keys, the app reads them all from that profile alone, so put every one you use there.

369> It is an app-behavior key. If your MDM profile holds only such keys, a user's or bootstrap server's value for one is ignored: put all you use there.

369370

370371***

371372

from line 688

687688>

688689> Off unless you set it to `true`. While off, Auto mode's built-in safety check reviews risky actions.

689690>

690> This setting is temporary. It goes away when Claude Code drops that built-in check. After that, only turning off **Allow Auto mode** avoids the provider's check.

691> This setting goes away when Claude Code drops that built-in check. After that, only turning off **Allow Auto mode** avoids the provider's check.

691692>

692693> When on, each Auto mode request carries one more `anthropic-beta` value and a `safeguards` field. The field describes the session, including Claude Code's `autoMode` settings, permission rules, folder paths, a user name and Git state. Your gateway must forward both unchanged, and return `safeguard_results` and tool-use IDs unchanged. If it returns an error such as 401 or 500, every Auto mode turn fails. Turn this off and have users restart the app.

693694>

from line 1138

11371138

11381139> [accordion] More detail

11391140>

1140> Each entry is a model ID string or an object:

1141> Each entry is a model ID or an object:

11411142>

1142> ```json theme={null} theme={null}

1143> ```json theme={null}

11431144> [

11441145> {"name": "claude-sonnet-5",

11451146> "supports1m": true},

from line 1148

11471148> ]

11481149> ```

11491150>

1150> Use your inference provider's exact model ID:

1151> Use your provider's exact model ID:

11511152>

11521153> * **Vertex:** the publisher ID (`claude-sonnet-5`).

11531154> * **Bedrock:** the inference-profile ID (`us.anthropic.claude-sonnet-5`).

11541155> * **Foundry:** the deployment name.

1155> * **Gateway:** the exact ID that its `/v1/models` endpoint returns.

1156> * **Gateway:** the ID its `/v1/models` endpoint returns.

11561157>

1157> For Auto mode on a gateway, also list `claude-sonnet-5`. Its safety classifier calls that ID by default (see `autoModeEnabled`).

1158> For Auto mode on a gateway, also list `claude-sonnet-5`, or an Opus or older Sonnet entry tagged with its tier (see `autoModeEnabled`).

11581159

11591160> [accordion] Child attributes (8)

11601161>

from line 1402

14011402

14021403> [accordion] More detail

14031404>

1404> Every connection is still checked against `sshHostAllowlist`. While that list allows no host, the SSH section is hidden.

1405> Every connection is still checked against `sshHostAllowlist`. While that list allows no host, Code offers none of these.

14051406>

14061407> For a connection from this list, the app does not first ask the user to confirm the host. SSH's own host-key checks still apply, so a first connection to a host missing from the user's `known_hosts` may ask the user or fail. Users can still add connections of their own.

14071408>

from line 1511

15101511>

15111512> `standard` turns on Unified Claude. `off` turns Chat and Cowork off, which leaves only Code, or nothing where Code is off. `isClaudeCodeForDesktopEnabled` still decides Code. Under `standard`, if you use `chatSessionRetentionDays`, set `coworkSessionRetentionDays` as well: it covers new conversations that are Cowork tasks.

15121513>

1513> **Unset:** the three settings that this key replaces decide until November 10, 2026 (12:00 PM PT). Current versions of the app started after that read an unset key as `standard`, whatever those three say. Cowork is then on even where `coworkTabEnabled` is `false`.

1514> **Unset:** the three settings that this key replaces decide until November 10, 2026 (12:00 PM PT). Current versions started after that read an unset key as `standard`, so Cowork is on even where `coworkTabEnabled` is `false`. Where those three leave Chat and Cowork off, the newest versions read `off` until December 17, 2026 (12:00 PM PT).

15141515>

15151516> A non-empty value that the app does not recognize, such as `Standard`, is read as `off`.

15161517

from line 1557

15561557> * **Ports:** an entry other than `*` can end in `:port`, which only Code ignores. Update all devices first: older versions then block every host in Cowork's shell.

15571558> * **Plugins:** command-line tools also reach hosts their plugin declares.

15581559> * **Built-in browser:** a list other than `*`, even an empty one, limits Claude's browsing.

1559> * **Code:** a list other than `*` locks Claude Code's sandbox on, for shell commands only, where it runs (see `allowedWorkspaceFolders`). So does an unset list, except where a local file is the only configuration and `blockReadsOutsideWorkingDirectories` is off. Claude Code's own managed settings, where a session has any, take priority by default.

1560> * **Code:** a list other than `*` locks Claude Code's sandbox on, for shell commands only, where it runs (see `allowedWorkspaceFolders`). So does an unset list, except where a local file is the only configuration and `blockReadsOutsideWorkingDirectories` is off. Claude Code's own managed settings take priority by default.

15601561

15611562***

15621563

from line 1572

15711572> Claude can read and write in every listed folder unless its `mode` is `ro`. An empty list allows none.

15721573>

15731574> * **Paths:** `~` and these variables expand per user: `%OneDrive%`, `%OneDriveCommercial%`, `%OneDriveConsumer%`, `%APPDATA%`, `%LOCALAPPDATA%`, `%USERNAME%`, `%XDG_DOCUMENTS_DIR%`. An entry with any other variable, or an unset one, adds no folder.

1574> * **Code shell commands:** this key turns on Claude Code's sandbox on macOS, and on Linux and WSL2 where bubblewrap and socat work. There, most writes outside the list are refused, and most reads are not. Elsewhere, Windows included, only Claude's file tools follow the list. Claude Code's own managed settings, where a session has any, take priority by default.

1575> * **Code shell commands:** this key turns on Claude Code's sandbox on macOS, and on Linux and WSL2 where bubblewrap and socat work. There, most writes outside the list are refused, and most reads are not. Elsewhere, Windows included, only Claude's file tools follow the list. Claude Code's own managed settings take priority by default.

15751576>

15761577> Do not list a home folder: it holds SSH keys and shell start-up files.

15771578

from line 1619

16181619>

16191620> The user's git configuration files stay readable, and they can hold credentials. If the app cannot download its Claude Code, sessions may run on an older copy without this block.

16201621>

1621> Claude Code's own managed settings, where a session has any, take priority by default.

1622> Claude Code's own managed settings take priority by default.

16221623

16231624***

16241625

from line 1633

16321633>

16331634> Unless it is `false`, new Code sessions normally start in Auto mode.

16341635>

1635> By default on a gateway, Auto mode sends its own requests to Claude Sonnet 5. Your gateway must accept the ID `claude-sonnet-5` and the `anthropic-beta` value `context-1m-2025-08-07`. If you set `inferenceModels`, list that ID there and in any group's model list. If not, Auto mode can block actions it would normally allow.

1636> By default on a gateway, Auto mode's check calls `claude-sonnet-5`. Your gateway must accept that ID and the `anthropic-beta` value `context-1m-2025-08-07`. If you set `inferenceModels`, list that ID, or an Opus or older Sonnet entry tagged with its tier, there and in any group's model list. If not, Auto mode can block actions it would normally allow.

1637>

1638> In Cowork, while Auto mode runs, each shell command waits for this check (usually one more request). If no check can be made, the command is refused. On a model that can't run Auto mode, the task switches to Manually approve and shell commands skip this check. A plugin whose start hook sends a task's first message turns this check off for that task.

16361639

16371640***

16381641

from line 1706

17031706> Nothing is deleted: turning it back on restores the hidden marketplaces.

17041707>

17051708> * It does not limit Claude Code in a terminal.

1706> * Claude Code's own managed settings, where a session has any, take priority by default. Restrict marketplaces in those settings as well.

1709> * Claude Code's own managed settings take priority by default. Restrict marketplaces in those settings as well.

17071710>

17081711> Applies only while the app runs in third-party mode. If users could otherwise sign in to Claude.ai on the device, also set `deploymentMode` to `3p`, or `disableDeploymentModeChooser`.

17091712

from line 1843

18401843>

18411844> `ask` also turns off the user's saved “always allow” choices for that tool. A scheduled task in Cowork waits at the prompt.

18421845>

1843> **Rules such as `Bash(curl *)`:** Claude Code's own managed settings, where a session has any, take priority by default. A tool name such as `Bash` still applies. Update all devices first: an older version drops these rules, so the tool runs without a prompt.

1846> **Rules such as `Bash(curl *)`:** Claude Code's own managed settings take priority by default. A tool name such as `Bash` still applies. Update all devices first: an older version drops these rules, so the tool runs without a prompt.

18441847>

18451848> An unusable entry is dropped and recorded as a configuration error.

18461849

from line 1897

18941897>

18951898> MDM profile only. Only a machine-wide `false` (`HKLM`) allows WSL sessions on a device with any managed configuration.

18961899>

1897> For a WSL session that starts under `allowedWorkspaceFolders`, Desktop checks it inside the distro, so `~` also means the distro user's home. The session needs both bubblewrap and socat there to start. Shell commands can read the Windows drives under `/mnt`. `blockReadsOutsideWorkingDirectories` hides them, apart from listed `/mnt` folders. Users can re-open them. Claude Code's server-managed settings, among others, can take away that read limit and the sandbox: see the list's Path help.

1900> Under `allowedWorkspaceFolders`, a WSL session needs bubblewrap and socat in the distro, and its shell commands can read the Windows drives under `/mnt`. Claude Code's server-managed settings, among others, can remove its sandbox and `blockReadsOutsideWorkingDirectories`: see the Path help of `allowedWorkspaceFolders`.

18981901>

1899> This is an app-behavior key, like `disableAutoUpdates`. If your MDM profile holds nothing but such keys, the app reads them all from that profile alone, so put every one you use there.

1902> It is an app-behavior key. If your MDM profile holds only such keys, a user's or bootstrap server's value for one is ignored: put all you use there.

19001903

19011904***

19021905

from line 1913

19101913

19111914> [accordion] More detail

19121915>

1913> The launcher comes from the device's managed settings, not server-managed settings. SSH sessions to Linux or macOS hosts use the one in the host's managed-settings files.

1916> The launcher comes from the device's managed settings, not server-managed settings. SSH sessions to Linux or macOS use the host's managed-settings files.

19141917>

1915> * **Credentials:** the app passes the launcher no inference credential. The launcher must supply one, such as `ANTHROPIC_AUTH_TOKEN`, or every reply fails.

1916> * **Not used:** on Windows for sessions on the device, in WSL, in Cowork, and for the connection test and title generation.

1918> * **Credentials:** the app passes no inference credential. The launcher must supply one, such as `ANTHROPIC_AUTH_TOKEN`, and keep `ANTHROPIC_BASE_URL` or set your gateway's, or every reply fails.

1919> * **Not used:** for sessions on a Windows device, in WSL, in Cowork, and for the connection test and title generation.

19171920>

19181921> To stop users bypassing the launcher, set this key in your MDM profile, with `disableDeploymentModeChooser` if that profile sets more than app-behavior keys.

19191922>

1920> This is an app-behavior key, like `disableAutoUpdates`. If your MDM profile holds nothing but such keys, the app reads them all from that profile alone, so put every one you use there.

1923> It is an app-behavior key. If your MDM profile holds only such keys, a user's or bootstrap server's value for one is ignored: put all you use there.

19211924

19221925***

19231926

from line 2121

21182121> >

21192122> > Unset is off, except in Admin Console organizations, where it is on unless an admin turns it off. Without the Admin Console, also set `deploymentOrganizationUuid`. Only sessions stored before you set it are copied.

21202123> >

2121> > It brings back more than sessions, without asking the user. That includes:

2124> > Without asking the user, it brings back more than sessions, including:

21222125> >

2123> > * The user's Cowork memory, global instructions and Instructions for Claude, which are used at once, unreviewed.

2126> > * The user's Cowork memory, global instructions, Instructions for Claude and project descriptions, which are used at once, unreviewed.

2127> > * The folders connected to Cowork projects and sessions. Claude can read and change their files, as under the earlier configuration.

21242128> > * Scheduled tasks. A task that was on runs at its next scheduled time.

21252129> > * Uploaded plugins, unless `userPluginUploadsEnabled` is off. They can run programs on the device.

21262130> > * Saved skills, unless `skillCreationEnabled` is off.

from line 2135

21312135>

21322136> > [accordion] More detail

21332137> >

2134> > The zip contains sessions, projects and their files, memory, scheduled tasks, saved skills, uploaded plugins, some app preferences, and local MCP servers. Passwords or API keys in them are included. Sign-ins and the servers’ variable values are not. Treat it as sensitive data.

2138> > The zip can contain sessions, projects and their files, memory, scheduled tasks, saved skills, uploaded plugins, some app preferences, and local MCP server commands. Passwords or API keys in them are included. Treat it as sensitive data.

2139> >

2140> > This setting does not cover the `/export` command.

21352141>

21362142> **bannerBehavior** `enum`

21372143>

from line 2192

21862192> >

21872193> > Also applies to an installed plugin's server that matches this entry by URL, or else by name (letter case is ignored).

21882194> >

2189> > * That server follows this entry instead of `orgPluginSettings`, even if the entry sets no `toolPolicy`. A built-in entry (one with `server`) applies only if it sets one.

2195> > * That server follows this entry instead of `orgPluginSettings`, even if the entry sets no `toolPolicy`. A built-in entry (one with `server`) applies only if it sets one. A local entry applies only where it has a `command`.

21902196> > * For a server that only a plugin runs, use an entry with `transport: "policy-only"`.

2191> > * Claude Code runs or connects to some plugin servers itself. For those: Claude Code's own managed settings, where a session has any, take priority by default.

2197> > * Claude Code runs or connects to some plugin servers itself. For those: Claude Code's own managed settings take priority by default.

21922198>

21932199> > [tab] microsoft365

21942200> >

from line 2302

22962302> >

22972303> > > [accordion] More detail

22982304> > >

2299> > > A value written here replaces the entry's value whole: lists and maps are not merged.

2305> > > Lists and maps are replaced, not merged.

23002306> > >

2301> > > * A local (`stdio`) entry can repeat `command`, `args`, `env`, `envHelper` and `envHelperArgs`. It always needs its own `command` too.

2307> > > * A local (`stdio`) entry can repeat `command`, `args`, `env`, `envHelper` and `envHelperArgs`.

23022308> > > * A remote or web search entry can repeat `headersHelper` and `headersHelperArgs`. If it gives `headersHelper` here, it needs its own too.

23032309> > > * A mistake under any operating system drops the server on all of them.

2304> > > * An older version ignores this setting and runs the entry's own values. Until all devices are updated, put the Windows values in the entry itself.

2310> > > * Older versions ignore this setting and use the entry's own values. They and some later versions drop an entry with no `command` of its own. Until all devices are updated, put the Windows values in the entry itself.

23052311> >

23062312> > > [accordion] Child attributes (3)

23072313> > >

from line 2559

25532559> >

25542560> > > [accordion] More detail

25552561> > >

2556> > > A value written here replaces the entry's value whole: lists and maps are not merged.

2562> > > Lists and maps are replaced, not merged.

25572563> > >

2558> > > * A local (`stdio`) entry can repeat `command`, `args`, `env`, `envHelper` and `envHelperArgs`. It always needs its own `command` too.

2564> > > * A local (`stdio`) entry can repeat `command`, `args`, `env`, `envHelper` and `envHelperArgs`.

25592565> > > * A remote or web search entry can repeat `headersHelper` and `headersHelperArgs`. If it gives `headersHelper` here, it needs its own too.

25602566> > > * A mistake under any operating system drops the server on all of them.

2561> > > * An older version ignores this setting and runs the entry's own values. Until all devices are updated, put the Windows values in the entry itself.

2567> > > * Older versions ignore this setting and use the entry's own values. They and some later versions drop an entry with no `command` of its own. Until all devices are updated, put the Windows values in the entry itself.

25622568> >

25632569> > > [accordion] Child attributes (3)

25642570> > >

from line 2623

26172623> >

26182624> > Must be: `stdio`

26192625> >

2620> > **command** `string` *required*

2626> > **command** `string`

26212627> >

26222628> > Consent required (A value that a bootstrap server delivers applies only after the user approves it, unless machine-scoped device management set that server's address. The trustBootstrapDelivery key overrides that default. A value set in an MDM profile, the local configuration file or the Enterprise Admin Console needs no approval.)

26232629> >

2624> > Absolute path to the server executable, run on the user’s machine.

2630> > Absolute path to the server executable on the user’s machine. Without it, the server runs only on operating systems with their own Command.

26252631> >

2632> > > [accordion] More detail

2633> > >

2634> > > Required, unless `platformOverrides` gives a `command` for at least one operating system. The server then runs only where it has a `command`. Elsewhere its `toolPolicy` does not apply. It still counts as a managed server there: Claude Code drops MCP servers that users add. No other entry can use its name.

2635> >

26262636> > **args** `string[]`

26272637> >

26282638> > Consent required (A value that a bootstrap server delivers applies only after the user approves it, unless machine-scoped device management set that server's address. The trustBootstrapDelivery key overrides that default. A value set in an MDM profile, the local configuration file or the Enterprise Admin Console needs no approval.)

from line 2688

26782688> >

26792689> > > [accordion] More detail

26802690> > >

2681> > > A value written here replaces the entry's value whole: lists and maps are not merged.

2691> > > Lists and maps are replaced, not merged.

26822692> > >

2683> > > * A local (`stdio`) entry can repeat `command`, `args`, `env`, `envHelper` and `envHelperArgs`. It always needs its own `command` too.

2693> > > * A local (`stdio`) entry can repeat `command`, `args`, `env`, `envHelper` and `envHelperArgs`.

26842694> > > * A remote or web search entry can repeat `headersHelper` and `headersHelperArgs`. If it gives `headersHelper` here, it needs its own too.

26852695> > > * A mistake under any operating system drops the server on all of them.

2686> > > * An older version ignores this setting and runs the entry's own values. Until all devices are updated, put the Windows values in the entry itself.

2696> > > * Older versions ignore this setting and use the entry's own values. They and some later versions drop an entry with no `command` of its own. Until all devices are updated, put the Windows values in the entry itself.

26872697> >

26882698> > > [accordion] Child attributes (3)

26892699> > >

from line 2766

27562766

27572767integerRange: 0–3,650Since 2.7032.0

27582768

2759**Scheduled-task tool approval lifetime.** Days a scheduled task can reuse a persistent MCP tool approval before it asks again. 0 turns reuse off. Unset: no limit.

2769**Scheduled-task tool approval lifetime.** Days a scheduled task reuses a persistent MCP tool approval before asking again. 0 is off. Unset: no limit (Cowork folder deletes: 30 days).

27602770

27612771> [accordion] More detail

27622772>

from line 2788

27782788>

27792789> When `false` comes from an MDM profile, the app starts only the local `managedMcpServers` entries in that same profile, exactly as written there. A `false` from any other source does not do this.

27802790>

2781> Claude Code's own managed settings, where a session has any, take priority by default.

2791> Claude Code's own managed settings take priority by default.

27822792

27832793***

27842794

from line 2804

27942804> * **Once set:** no entry allows a plugin's local (`stdio`) server, and servers that a user or a project configures for Claude Code are not connected.

27952805> * **`policy-only`:** a `managedMcpServers` entry with that `transport` does not allow its server. List the server's own URL here too.

27962806>

2797> Claude Code's own managed settings, where a session has any, take priority by default.

2807> Claude Code's own managed settings take priority by default.

27982808

27992809> [accordion] Child attributes (1)

28002810>

from line 2828

28182828> * **Not affected:** `managedMcpServers` and servers from the org-plugins directory on the device.

28192829> * **Any other form**, such as `serverName`, is reported and blocks every plugin's remote server.

28202830>

2821> Claude Code's own managed settings, where a session has any, take priority by default.

2831> Claude Code's own managed settings take priority by default.

28222832

28232833> [accordion] Child attributes (1)

28242834>

from line 2977

29672977

29682978booleanDefault: falseSince 1.2581.0

29692979

2970**Block nonessential services.** Connector icons, hosted artifact previews, MCP Apps widgets and the Linux spellcheck dictionary. A blocked widget shows an error.

2980**Block nonessential services.** Connector icons, hosted artifact previews, MCP Apps widgets, Linux spellcheck, and GitLab and Gerrit status. Blocked widgets show an error.

29712981

29722982> [accordion] More detail

29732983>

from line 2986

29762986> * Artifacts still render locally.

29772987> * Excel files in the Code tab preview only through Claude’s workspace (the local VM).

29782988> * Spellcheck underlines are off on Linux.

2989> * The Code tab’s pull request bar stops updating or adding GitLab merge requests and Gerrit changes. GitHub pull requests still show. Claude Code may still check GitLab or Gerrit with your command-line sign-ins unless Block nonessential telemetry is on.

29792990>

29802991> Windows still downloads a dictionary for a language it cannot check natively. This key does not stop that download.

29812992

from line 3082

30713082

30723083One of: `off`, `error` (default), `warn`, `info`, `debug`

30733084

3085> [accordion] More detail

3086>

3087> Every level but `off` also sends one info record, `lam_vm_edr_extension_install_completed`, each time the Cowork workspace VM reports that an endpoint security (EDR) package installed. Filter on that name to leave it out of your collector.

3088

30743089***

30753090

30763091#### `otlpContentCapture`

from line 3156

31413156>

31423157> On Windows the notice covers installs from the MSIX package, not the Microsoft Store version or the .exe installer. The switch to the newer version may end the Cowork tasks of other users signed in on that device.

31433158>

3144> This is an app-behavior key, like `releaseChannel`. If your MDM profile holds nothing but such keys, the app reads them all from that profile alone, so put every one you use there.

3159> It is an app-behavior key. If your MDM profile holds only such keys, a user's or bootstrap server's value for one is ignored: put all you use there.

31453160

31463161***

31473162

from line 3173

31583173> * **Unset:** off in third-party deployments. Where users sign in with Claude.ai it follows Anthropic's rollout, and `false` keeps it off.

31593174> * **Windows:** if Windows does not reopen Claude, scheduled tasks and background work stop until a user opens it. The restart may also end the Cowork tasks of other users signed in on that device.

31603175>

3161> This is an app-behavior key, like `disableAutoUpdates`. If your MDM profile holds nothing but such keys, the app reads them all from that profile alone, so put every one you use there.

3176> It is an app-behavior key. If your MDM profile holds only such keys, a user's or bootstrap server's value for one is ignored: put all you use there.

31623177

31633178***

31643179

from line 3191

31763191> * Idle means 10 minutes without input. Where the system reports no idle time, as some Wayland sessions do, an unset key never restarts: set a number.

31773192> * The restart waits while Claude is mid-task on the device.

31783193>

3179> This is an app-behavior key, like `disableAutoUpdates`. If your MDM profile holds nothing but such keys, the app reads them all from that profile alone, so put every one you use there.

3194> It is an app-behavior key. If your MDM profile holds only such keys, a user's or bootstrap server's value for one is ignored: put all you use there.

31803195

31813196***

31823197

from line 3210

31953210>

31963211> These hours do not delay an update. It usually installs sooner, after 10 minutes with no Claude window in use and no task running.

31973212>

3198> This is an app-behavior key, like `disableAutoUpdates`. If your MDM profile holds nothing but such keys, the app reads them all from that profile alone, so put every one you use there.

3213> It is an app-behavior key. If your MDM profile holds only such keys, a user's or bootstrap server's value for one is ignored: put all you use there.

31993214

32003215***

32013216

from line 3226

32113226>

32123227> If an MDM profile sets `bootstrapUrl` to a `config.claude.com` URL and leaves `bootstrapEnabled` on, the app reads the feed from `releases.claude.com` whatever this key says. Turn this key on anyway: an older version reads it from there only when this key is on.

32133228>

3214> This is an app-behavior key, like `disableAutoUpdates`. If your MDM profile holds nothing but such keys, the app reads them all from that profile alone, so put every one you use there.

3229> It is an app-behavior key. If your MDM profile holds only such keys, a user's or bootstrap server's value for one is ignored: put all you use there.

32153230

32163231***

32173232

from line 3247

32323247> * Users who sign in to Claude.ai follow `stable`, unless their organization manages Claude Desktop from the Admin Console.

32333248> * No effect on Linux or Microsoft Store installs.

32343249>

3235> This is an app-behavior key, like `disableAutoUpdates`. If your MDM profile holds nothing but such keys, the app reads them all from that profile alone, so put every one you use there.

3250> It is an app-behavior key. If your MDM profile holds only such keys, a user's or bootstrap server's value for one is ignored: put all you use there.

32363251

32373252***

32383253

from line 3265

32503265>

32513266> When an MDM profile that sets more than app-behavior keys first reaches a running app, the restart dialog can show with no countdown.

32523267>

3253> This is an app-behavior key, like `disableAutoUpdates`. If your MDM profile holds nothing but such keys, the app reads them all from that profile alone, so put every one you use there.

3268> It is an app-behavior key. If your MDM profile holds only such keys, a user's or bootstrap server's value for one is ignored: put all you use there.

32543269

32553270***

32563271

from line 3279

32643279>

32653280> A change that needs a restart starts the `relaunchEnforcementHours` countdown.

32663281>

3267> This is an app-behavior key, like `disableAutoUpdates`. If your MDM profile holds nothing but such keys, the app reads them all from that profile alone, so put every one you use there.

3282> It is an app-behavior key. If your MDM profile holds only such keys, a user's or bootstrap server's value for one is ignored: put all you use there.

32683283

32693284***

32703285

from line 3315

33003315

33013316> [accordion] More detail

33023317>

3303> Applies only while the app runs in third-party mode. Deletion can start shortly after the app gets this configuration. Pinned sessions are not exempt. Opening an old chat or Cowork task without continuing it does not reliably keep it.

3318> Applies only in third-party mode. Deletion can start shortly after the app gets this configuration. Pinned sessions are not exempt. Opening an old chat or Cowork task without continuing it may not keep it.

33043319>

33053320> It does not delete, for example:

33063321>

from line 3328

33133328>

33143329> A value that cannot be read as a whole number of days deletes nothing.

33153330>

3316> To keep some people's idle sessions, set all three periods to 3650 days for them, in the configuration that sets their periods.

3331> To keep some people's idle sessions, set all three periods to 3650 days in the configuration that sets their periods.

33173332

33183333***

33193334

from line 3340

33253340

33263341> [accordion] More detail

33273342>

3328> Applies only while the app runs in third-party mode. Deletion can start shortly after the app gets this configuration. Pinned sessions are not exempt. Opening an old chat or Cowork task without continuing it does not reliably keep it.

3343> Applies only in third-party mode. Deletion can start shortly after the app gets this configuration. Pinned sessions are not exempt. Opening an old chat or Cowork task without continuing it may not keep it.

33293344>

33303345> It does not delete, for example:

33313346>

from line 3353

33383353>

33393354> A value that cannot be read as a whole number of days deletes nothing.

33403355>

3341> To keep some people's idle sessions, set all three periods to 3650 days for them, in the configuration that sets their periods.

3356> To keep some people's idle sessions, set all three periods to 3650 days in the configuration that sets their periods.

33423357

33433358***

33443359

from line 3365

33503365

33513366> [accordion] More detail

33523367>

3353> Applies only while the app runs in third-party mode. Deletion can start shortly after the app gets this configuration. Pinned sessions are not exempt. Opening an old chat or Cowork task without continuing it does not reliably keep it.

3368> Applies only in third-party mode. Deletion can start shortly after the app gets this configuration. Pinned sessions are not exempt. Opening an old chat or Cowork task without continuing it may not keep it.

33543369>

33553370> It does not delete, for example:

33563371>

from line 3378

33633378>

33643379> A value that cannot be read as a whole number of days deletes nothing.

33653380>

3366> To keep some people's idle sessions, set all three periods to 3650 days for them, in the configuration that sets their periods.

3381> To keep some people's idle sessions, set all three periods to 3650 days in the configuration that sets their periods.

33673382

33683383***

33693384

from line 3466

34513466

34523467***

34533468

3469### `organizationAnnouncement`

3470

3471objectSince 5.1231.0

3472

3473**Organization announcement.** Shows everyone one message from your organization, which each person can close. Off unless set.

3474

3475> [accordion] More detail

3476>

3477> It is signed “From” and your `deploymentDisplayName`, or “From your organization”.

3478>

3479> * **Shown again:** without an `id`, when `title` or `body` changes. With one, only when the `id` changes.

3480> * **Links:** write `[words](address)`, with an `http` or `https` address.

3481> * **Invalid or too long text:** nothing is shown, and the log says why.

3482> * **MDM:** alone in a profile, or with app-behavior keys only, it keeps other settings and wins over the console's message. Update all devices first. A first profile blocks WSL (see `disableWslSessions`). Over a Setup configuration it also takes Code's shell offline on macOS and Linux until Setup sets `coworkEgressAllowedHosts`.

3483> * **Admin Console:** a group's message keeps the organization's `id` and `placement` unless it sets its own.

3484

3485> [accordion] Child attributes (4)

3486>

3487> **title** `string` *required*

3488>

3489> One line of plain text, up to 80 characters.

3490>

3491> **body** `string` *required*

3492>

3493> Markdown: paragraphs, bold, lists and links. Anything else shows as plain text or is left out. Up to 1,000 characters.

3494>

3495> **placement** `enum` (default: inline)

3496>

3497> A card on the start screen of Chat, Cowork and Code, or a dialog over the whole window. Unset: the card.

3498>

3499> One of: `inline` (default), `modal`

3500>

3501> **id** `string`

3502>

3503> Optional. With an ID, people who closed the message see it again only when the ID changes.

3504

3505***

3506

34543507### `banner`

34553508

34563509objectSince 1.7196.0

from line 3546

34933546

34943547> [accordion] More detail

34953548>

3496> * **Runs:** on the user's device, as the signed-in user, when a session opens, a turn ends, the app regains focus or the model changes.

3497> * **Input:** one JSON line on standard input: `{"session_id": "…", "model": {"id": "…", "display_name": "…"}}`. Fields with no value are left out. Do not build a file path from these values.

3549> * **Runs:** on the user's device, as the signed-in user. When: a session opens, a turn ends or its result arrives, the app regains focus or the model changes.

3550> * **Input:** one JSON line on standard input: `{"session_id": "…", "model": {"id": "…", "display_name": "…"}, "cost": {"total_cost_usd": 1.24}}`. `cost` holds only the session's estimated cost in USD, while `inferenceModelPricingEnabled` is on, and is for display only. Fields with no value are left out, so no `cost` means no estimate, not 0. Do not build a file path from these values.

34983551> * **Output:** Claude shows the first non-empty line, up to 200 characters. ANSI codes 31 to 36 and 91 to 96 set the color.

34993552> * **Limits:** 10 seconds and 64 KiB of output. Past either, Claude stops the program.

35003553

from line 3757

37043757

37053758> [accordion] More detail

37063759>

3707> * If a `managedMcpServers` entry is for the same server (same URL, otherwise same name), the entry here is ignored. Put the locks in that entry's `toolPolicy`.

3760> * If a `managedMcpServers` entry is for the same server (same URL, otherwise same name), the entry here is ignored. Put the locks in that entry's `toolPolicy`. On an operating system where that local (`stdio`) entry has no `command`, the entry here applies.

37083761> * Update all devices first: an older version ignores this list and enforces no locks.

3709> * Claude Code's own managed settings, where a session has any, take priority by default.

3762> * Claude Code's own managed settings take priority by default.

37103763

37113764> [accordion] Child attributes (2)

37123765>

third-party/claude-desktop/configuration-changelog Changed · +35 / -0 lines

from line 4

55Configuration keys by Claude Desktop release. Each section lists keys added in that release, with the MDM key name (for plist/registry deployment) and the equivalent JSON shape (for local-file or bootstrap remote configuration).

7**v5.1231.0**

92026-11-10

11| MDM key | Type | Description |

12| - | - | - |

13| [`organizationAnnouncement`](https://claude.com/docs/third-party/claude-desktop/configuration#organizationannouncement) | `object` | Organization announcement |

15**JSON (e.g. for non-MDM users or Bootstrap):**

17```json theme={null}

18{

19 "appearance": {

20 "announcement": {

21 "title": "<string>",

22 "body": "<string>",

23 "placement": "<inline|modal>",

24 "id": "<string>"

25 }

26 }

27}

28```

30Update all devices before you put `organizationAnnouncement` in a device profile. Older versions on Linux refuse a profile with any key they do not know, and older versions on Windows refuse a profile with only such keys. The settings made in Setup then stop applying as well.

32As with any device profile, a computer's first one also blocks WSL sessions. Where settings were made in Setup, it also cuts off network access for Code's shell commands on macOS and Linux until `coworkEgressAllowedHosts` is set in Setup.

34**Changed:**

36* `desktopHome`: at launches after 12:00 PM PT on November 10, 2026, an unset key reads as `off` where `coworkTabEnabled` is `false`, `chatTabEnabled` is not `true` and Code is on, so people there keep only Code. From 12:00 PM PT on December 17, 2026, it reads as `standard` there too. Versions 4.4212.0 to 4.23118.1 read it as `standard` there at launches after 12:00 PM PT on November 10. A key set to `off` stays `off`. Where a configuration server sends the settings, set it there too.

37* `managedMcpServers`: a local entry can leave out its own `command` when `platformOverrides` gives one for at least one operating system. It then runs only on those systems. The entry is dropped on every device if `win32`, `darwin` or `linux` has other values, such as `args`, but no `command`. It is also dropped if `platformOverrides` holds any other name, such as `windows`, unless all three have a `command`. Keep each server in one entry. Two entries with the same name make the whole list unreadable, so no managed server starts and plugins' MCP tools are blocked. Older versions drop an entry with no `command` of its own. If every entry in the list is dropped, the app blocks plugins' MCP tools. Update all devices first, or give the entry its own `command`, with which the server runs on every system.

38* `claudeAiImport`: with `automatic3pImport`, the copy now keeps Cowork projects' descriptions and folders, and Cowork sessions' folders. The folders are connected again without asking the person, so Cowork can read and change their files as before the move.

39* `mcpScheduledTaskApprovalLifetimeDays`: also sets how many days a scheduled Cowork task's approval to delete files in one of its folders lasts, and `0` turns that approval off. Where it is unset, that approval lasts 30 days, and a task's other approvals still have no limit.

40* `sessionStatusLine`: the program also receives `cost.total_cost_usd` while `inferenceModelPricingEnabled` is on.

742**v4.23118.1**

843

9442026-11-09

claude-science/command-line-settings Changed · +1 / -1 lines

from line 20

2020| `claude-science sandbox approve` | Linux only, version 0.1.71 or later. Approve your own copy of bubblewrap or socat for the sandbox. `--bwrap <path>` and `--socat <path>` name the programs, `--yes` skips the confirmation and is required when no terminal is attached, and `--remove` (alone, or with `--bwrap` or `--socat` and no path) removes the approval. Stop Claude Science first. See [Approve your own copy of bubblewrap or socat](https://claude.com/docs/claude-science/run-on-remote-linux-server.md#approve-your-own-copy-of-bubblewrap-or-socat). |

2121| `claude-science sandbox status` | On Linux, version 0.1.71 or later, print which bubblewrap and socat the next start would try, the system's first, then yours. |

2222| `claude-science install` | Windows only. Install the app for your user account, with a PATH entry, a Start menu shortcut, and an uninstall entry under Windows **Settings > Apps > Installed apps**. Run it again to repair them. |

23| `claude-science uninstall` | Windows only. Remove the app, its shortcuts, and its PATH entry while keeping your data; `--purge` also deletes the data directory. Quit Claude Science first. |

23| `claude-science uninstall` | Windows only. Remove the app, its shortcuts, and its PATH entry while keeping your data. `--purge` also permanently deletes your whole data directory, even if you moved it, with your projects, your conversation history, and any files of your own in it. It doesn't ask you to confirm. Quit Claude Science first. See [Uninstall Claude Science](https://claude.com/docs/claude-science/get-started.md#uninstall-claude-science). |

2424| `claude-science --version` | Print the version. |

2525| `claude-science <command> --help` | Print help for any command. |

2626

third-party/claude-desktop/gateway Changed · +1 / -1 lines

from line 464

464464>

465465> Off unless you set it to `true`. While off, Auto mode's built-in safety check reviews risky actions.

466466>

467> This setting is temporary. It goes away when Claude Code drops that built-in check. After that, only turning off **Allow Auto mode** avoids the provider's check.

467> This setting goes away when Claude Code drops that built-in check. After that, only turning off **Allow Auto mode** avoids the provider's check.

468468>

469469> When on, each Auto mode request carries one more `anthropic-beta` value and a `safeguards` field. The field describes the session, including Claude Code's `autoMode` settings, permission rules, folder paths, a user name and Git state. Your gateway must forward both unchanged, and return `safeguard_results` and tool-use IDs unchanged. If it returns an error such as 401 or 500, every Auto mode turn fails. Turn this off and have users restart the app.

470470>