One read of Claude Documentationclaude-docs-20261112T183708Z
4 pages moved out of 290 read.
Pages moved
4
significant first
Pages read
290
in this capture
Captured
18:37 UTC
Corpus hash
1cb9bbd89697
corpus-hash
What this read moved
1-4 of 4cowork/changelog Changed · +78 / -0 lines
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 2
22
33> Release notes for Claude Desktop
44
5**v5.11492.0**
6
72026-11-12
8
9Bundled Claude Code version: 2.1.321.
10
11**General**
12
13* Added Developer > Export Configuration Template, which exports ADMX and Profile Manifest policy templates for the settings of standard Claude Desktop, third-party inference, or both.
14* (breaking) Changed the built-in browser and preview panes to send a client certificate only to sites that device management lists in `builtinBrowserClientCertificateHosts`. A site that requires one stops loading there until it is listed. Behind a proxy that asks for one on every site, use `*`.
15* Changed `builtinToolPolicy`: `ask` rules with arguments, such as `Bash(curl *)` in Code or `Read(~/.ssh/**)`, now show the approval prompt on devices with their own Claude Code managed settings, unless those settings set `allowManagedPermissionRulesOnly`.
16* Changed automatic restarts for updates on macOS to wait while the keychain is locked, for up to 72 hours. A locked keychain doesn't delay restarts timed by `autoUpdaterEnforcementHours` or `installedUpdateEnforcementHours`.
17* Fixed a likely cause of brief freezes on Windows when opening a session or answering an approval after its notification had left the screen.
18* Fixed Claude reopening as a blank window on Windows after it was closed while minimized.
19* Fixed Claude Setup on Windows offering people without administrator rights an install that removes their working MSIX install of Claude; it now opens that Claude instead.
20* Fixed Code and Cowork losing a Claude.ai sign-in when a company proxy or gateway answers its background renewal with a JSON error.
21* Fixed edits to an artifact being lost when you left your chats or Cowork tasks within a few seconds of typing.
22* Fixed the app on macOS restarting by itself after ten idle minutes to install an update while the keychain was locked, which left it unable to read its stored secrets until the next restart.
23* Fixed the import from Claude (third-party) leaving out scheduled tasks, projects with no session, and accepted project instructions from a Claude Desktop export that the user confirmed as their own.
24
25**Code**
26
27* Changed Auto mode in local Code sessions: a session that Claude started can now start more sessions for its task with no approval, if Auto's check allows it. The limits are 10 per message you type and 5 at once.
28* Changed local, SSH and WSL Code tab sessions, except scheduled runs, to ask before using a connector tool that the organization limits to "Needs approval" in claude.ai, in every permission mode. Outside Auto and plan mode the prompt can offer "Allow for this session". Not in third-party deployments.
29* Changed SSH sessions on the built-in SSH library, including with `sshTransport` (beta) set to `builtin`: on Mac and Linux hosts, MCP servers from `claude_desktop_config.json` now run under Claude Code on the host, as they do over OpenSSH. They follow the host's MCP rules and stop with the session.
30* Changed which `cleanupPeriodDays` the app follows: one set on the computer in Claude Code's managed settings now counts if server-managed settings set none and the person's own (default 30 days) isn't shorter. Not in third-party deployments.
31* Fixed a rare case on Windows where ending an SSH sign-in could close an unrelated program.
32* Fixed an administrator's `env` values for tool and workflow variables in Claude Code's managed settings being ignored in local sessions when the computer already set the same variable.
33* Fixed local scheduled tasks and Remote Control sessions with no model of their own ignoring the `model` in an organization's Claude Code managed settings. Not in third-party deployments.
34* Fixed most automatic SSH connects over the built-in SSH library sending phone sign-in prompts again and again while nobody is at the computer. These connects now try the SSH key alone, and a host that needs more waits until the person is back.
35* Fixed new sessions starting in Manual when settings make Don't ask the default permission mode.
36* Fixed Rewind saying a code restore had failed, and offering another try, while the first restore could still be changing files.
37* Fixed SSH and WSL tasks staying interrupted when Claude Code was lost while an automatic message was waiting, and messages to an SSH task running while the app was closed waiting 30 seconds or longer; in most cases they now reach Claude at once.
38* Fixed SSH sessions getting no worktree, and working in the real checkout, on hosts where Git is only on the login shell's PATH (nix, conda, Homebrew on Linux).
39* Fixed SSH sessions getting stuck, asking for approval again, or running a connector's tool twice or late after the app quit, updated or lost its connection while the tool was being called.
40* Fixed SSH sessions whose key stops being accepted redialling so often that the server blocked the computer's address, and sessions behind a proxy command or jump host that is slow after a wake staying on "Reconnecting" instead of reconnecting by themselves once you are back (Mac, Linux).
41* Fixed the model menu offering models outside an administrator's managed-settings `availableModels` list when a user or project settings file listed others. Not in third-party deployments that set `inferenceModels`.
42* Fixed Try again in SSH and WSL sessions sending the words "Try again" instead of your message, after Claude Code stopped before reading it.
43
44**Cowork**
45
46* Added Download to the menu of files from tasks that run on your computer, so you can save a copy wherever you choose.
47* Changed connecting a folder by its path to a task that runs on your computer: Claude now refuses a path that goes through a link inside a folder such a task uses, if the link leads outside that folder. Choose the folder where it really is, not a link to it.
48* Changed GitHub access in tasks with restricted network access to clone and fetch only. In these tasks, `git push`, Git LFS and SSH remotes no longer work. Deployments that use the organization's own model provider see no change.
49* Changed what commands Claude runs can do on `registry.npmjs.org`, `registry.yarnpkg.com` and `crates.io`: downloads and `npm audit` still work, but publish, login and other requests are refused. Not affected: tasks whose Domain allowlist is "All domains", and third-party deployments.
50* Improved ejecting external drives on macOS: Claude now tries to release a drive shortly after a command on it ends, so that you can eject the drive while Claude is open.
51* Fixed a connected folder that you renamed, moved or deleted coming back as an empty folder the next time Claude ran a shell command.
52* Fixed a Cowork task or third-party chat staying blank, with no reply or notice, after safeguards flagged a message.
53* Fixed a task that kept asking before each web search after the administrator lifted an `ask` on web search.
54* Fixed attached files missing from new copies of Cowork and Chat sessions from an earlier organization or another Claude profile, and file cards and files from earlier turns not opening in copies. Also fixed new imports from an export file failing at every message behind some inference gateways.
55* Fixed Cowork tasks going missing on Windows 11 and later after Claude switched back to an earlier copy of its data. Third-party deployments are not affected.
56
57**3P**
58
59* Added `autoModeClassifierModel`, which chooses the model for Auto mode's built-in safety check in Code and Cowork. Actions your provider reviews itself don't use it. If unset, Claude Code chooses the model. A device's `CLAUDE_CODE_AUTO_MODE_MODEL` environment variable no longer counts in Code.
60* Added `builtinBrowserClientCertificateHosts`: the sites that get a client certificate in the built-in browser and preview panes. Behind a proxy that asks on every site, use `*`. Only machine-wide device management can set it. On Linux, or as a Windows policy's only key, add it after updating.
61* Added `deploymentLogo`, which shows your organization's logo beside the organization announcement. Paste a PNG image as a base64 `data:` URI. Update all devices before you put it in a device profile.
62* Added `enforceConsoleSignInOrgList` (device profile only): when on with `forceLoginOrgUUID` set, only listed organizations can use Claude Console sign-in, so add your Console organization's ID first. Off or unset, others still work with a log warning. The block announced earlier now needs this key.
63* Added `remoteFileDownloads` (beta), which controls which files users can download from an SSH host or WSL in Code sessions. When it is unset, users can download documents, images and small text files. Read its help before you set it in an MDM profile: devices can lose settings or WSL sessions.
64* Added `sensitivityLabels` to the configuration reference. On the built-in Microsoft 365 entry of `managedMcpServers`, it blocks OneDrive and SharePoint files and Outlook email that carry the Microsoft Purview labels you list. Update first: versions before 5.1231.0 block only files, or nothing.
65* Added Mermaid diagrams for `mermaid` code blocks in replies and Markdown file previews in Chat, Cowork, and the Code tab.
66* Added Web search and Web fetch under Connectors in the + menu and in Customize > Connectors. Each person can set either one to Always ask or Blocked, but can't loosen `builtinToolPolicy` or `disabledBuiltinTools`. On Bedrock, only Web fetch is listed.
67* (breaking) Changed the built-in browser and preview panes to send a client certificate only to sites in `builtinBrowserClientCertificateHosts`. With `builtinBrowserEnabled` on, a site that requires one stops loading there until you list it. Gateway and connector connections are not affected.
68* Changed `allowedWorkspaceFolders` on Windows SSH hosts: sessions and Claude's file tools now refuse a junction or folder link in an allowed folder that leads outside the list. To keep using it, add the folder it leads to.
69* Changed `autoUpdaterEnforcementHours` and `installedUpdateEnforcementHours`: with no number set, the restart on macOS now waits while the keychain is locked, for up to 72 hours, so that a saved provider API key still opens afterwards. With a number set, a locked keychain doesn't delay it.
70* Changed `claudeAiImport.automatic3pImport`: most Cowork and Chat sessions it copies from this version on now continue at the user's first message, with no "Continue this conversation?" prompt. Code sessions and sessions copied by earlier versions still ask.
71* Changed a connector tool set to `blocked` through device management to take effect without a restart. At the app's next configuration check (every 10 minutes by default), open sessions refuse it. This covers connectors that the app itself connects to.
72* Changed connectors on a Claude apps gateway: some people need to reconnect theirs once after this update. This can happen on a computer login that several people share, or on one that used another sign-in method before the gateway.
73* Changed connectors that the app itself connects to: in Auto and bypass modes, a tool set to `ask` now shows the approval prompt whether the policy names the connector by name or by URL. In an unattended scheduled run, the tool does not run unless a person approves it.
74* Changed the Code tab's model menu when `inferenceModels` is set: an `availableModels` list in a Claude Code settings file, managed or not, no longer greys out models, unless Claude Code's managed settings name a policy helper.
75* Removed the in-app deprecation warning about `coworkTabEnabled`, `chatTabEnabled` and `chatAdvancedFileAnalysisEnabled`. Versions 4.16336.0 to 5.1231.2 can still show it from November 17, 2026. From 4.16336.0 on, the app stops reading these settings at 12:00 PM PT on December 17, 2026.
76* Updated the help for `orgPluginSettings` and `managedMcpServers`: write a plugin server's name exactly as the plugin declares it, capitals included.
77* Fixed `claudeAiImport.automatic3pImport` dropping Auto mode from scheduled tasks. From this version on, a copied task on Auto or Skip all approvals arrives on Auto. If the task was switched on, it runs in Auto. Cowork tasks need `autoModeEnabled` set to `true`. Code tasks need it unset or `true`.
78* Fixed `claudeAiImport.automatic3pImport` leaving behind sessions imported from a file or folder, and projects and scheduled tasks brought from another computer with "Import as my own". Computers that already ran the copy get those projects and tasks at their next launch, with the tasks turned off.
79* Fixed scheduled tasks copied by `claudeAiImport.automatic3pImport`: History now lists their earlier runs, and a Cowork task can open its own task folder when its prompt gives the full path. Tasks copied by earlier versions do not change.
80* Fixed sessions stuck on "Authentication failed" after a slow sign-in refresh. Claude now asks you to try again in a moment and keeps your message.
81* Fixed the Setup window showing Unified Claude on for a configuration that leaves only Code on. Until December 17, 2026, saving, exporting or importing such a configuration in Setup writes `desktopHome` as `off`.
82
583**v5.1231.2**
684
7852026-11-10
from line 2409
23312409
23322410**General**
23332411
2334* Fixed an issue where permission prompts and in-session questions could silently stop appearing after an input-handling error — if Claude asked a question or requested permission and the prompt never showed up, this release fixes that. (Updates the bundled Claude Code CLI to 2.1.209.)
2335
2336**v1.20186.0**
2337
23382026-07-09
2339
2340**General**
2341
2342* Fixed `claude://` deep links being ignored when opening one launched the app from a closed state, including on Windows and Linux.
2343* Fixed device attestation failing on Windows when sending several messages at once.
2344* Fixed garbled tool summaries in the transcript: descriptions that don't start with a recognized verb (for example "Final verification") now appear as written instead of being mis-conjugated.
2345* Fixed skill proposal and skill-file cards failing to save with "Couldn't save this skill" when a skill of that name already exists; they now offer "Update skill" and a replace confirmation.
2346* Fixed the app forgetting your last-used tab (for example Code) after an update or re-login.
2347* Fixed the menu bar usage menu showing an empty progress bar for extra usage when the spend cap is unlimited.
2348
2349**Code**
2350
2351* Added a Troubleshooting option to import Claude Code CLI sessions found on this computer into the session list.
2352* Fixed a typed `<channel-message>` turn rendering as a spoofable "Message from `{server}`" card instead of as your own text.
2353* Fixed cross-session messages going missing in the transcript: messages from another session no longer disappear when they arrive in the same turn as other content or when their envelope can't be fully parsed.
2354* Fixed file links to files outside the working directory, including reports Claude writes to its scratchpad, showing "This file is outside the working directory" instead of opening.
2355* Fixed the context window indicator and token count staying at the pre-compaction value after compacting a conversation.
2356
2357**Cowork**
2358
2359* Fixed admin-configured plugin marketplace sync failing behind corporate proxies on macOS.
2360* Fixed plugin connectors sometimes missing from the Connectors list and tool permission prompts when they were slow to start.
2361* Fixed skills saved in a remote session sometimes still returning "Unknown command" right after saving.
2362* Fixed the "Run this task while your Mac sleeps" setting turning itself off after an app update.
2363
2364**3P**
2365
2366* Added `*` wildcard matching for managed MCP `toolPolicy` keys; partial wildcard keys such as `"outlook_*"` in existing configurations now take effect, including any `allow` wildcards, which pre-approve the tools they match. Exact keys and the standalone `"*"` key behave as before.
2367* Added support for exporting Cowork task telemetry over `otlpProtocol: grpc` on macOS and Linux when no network proxy is configured.
2368* Fixed Azure AI Foundry sessions failing with an authentication error on every message after interactive Microsoft Entra ID sign-in.
2369* Fixed gateway-SSO bootstrap dropping cross-origin `managedMcpServers` entries, so admin-provisioned third-party connectors reach the app under device-code sign-in.
2370* Fixed MCP connectors failing to connect through gateways that optionally request a TLS client certificate, even though the connection test passed.
2371* Fixed sign-in timing out with identity providers (such as PingFederate) that redirect via a rendered page after authentication.
2372* Fixed third-party settings ignoring managed configuration: the Claude Code pane now follows `isClaudeCodeForDesktopEnabled`, the Developer tab hides when `isLocalDevMcpEnabled` is off, and the Capabilities and Voice settings no longer appear.
2373
2374**v1.19367.0**
2375
23762026-07-07
2377
2378**General**
2379
2380* Added automatic updates on Linux through the Anthropic apt repository, so new versions arrive with `apt upgrade` (and unattended upgrades where enabled).
2381* Added the ability to archive or delete the current chat, project, task, or coding session directly from the command palette (`⌘K`, or `Ctrl+K` on Windows and Linux).
2382* Fixed bank payment-verification (3DS) pages not loading during checkout.
2383* Fixed MCP connectors in artifacts being silently dropped; approving a connector now reliably grants its tools to the artifact, and a previously stuck approval heals itself the next time you approve.
2384* Fixed repeated crashes on Linux caused by unstable graphics acceleration; the app now turns acceleration off automatically and tells you.
2385* Fixed the app becoming unresponsive when a session folder is on a slow or disconnected network drive.
2386
2387**Code**
2388
2389* Added descriptive branch names for local Code sessions, derived from your first message, in place of the random adjective-noun names.
2390* Changed the default transcript and composer width to a narrower, more readable column; a width you already chose in Settings → Appearance is preserved.
2391* Fixed "Open in Finder", "Open in editor", and "Attach to chat" doing nothing, or using the wrong path, for files in the diff panel when the session folder differs from the repo folder.
2392* Fixed freezes and stalls: while restoring a large number of sessions at startup, while builds or file syncs churned files inside a watched folder, and while the diff panel refreshed during a response.
2393* Fixed newly trusted folders sometimes failing to start a session with a "workspace is not trusted" error.
2394* Fixed security-key and phone sign-ins not completing in preview tabs.
2395
2396**Cowork**
2397
2398* Added a copyright-access notice in the session timeline when Claude in Chrome first operates on certain news publisher sites.
2399* Added keyboard access to the preview pane: Tab reaches a "Preview page" control, Enter moves focus into the loaded page, and `F6` (or `Ctrl+F6`) moves it back out.
2400* Fixed Cowork offering terminal access, and showing an impossible fix suggestion, on devices whose operating system cannot provide the virtualization its isolated environment needs (such as ChromeOS), where every command immediately failed.
2401
2402**3P**
2403
2404* Added `inferenceFoundryAuthFlow` to choose how interactive Microsoft Entra ID sign-in for Azure AI Foundry runs: `device-code` (the default, which shows a code to enter at `microsoft.com/devicelogin`) or `browser`, which opens the system browser for an authorization-code (PKCE) sign-in.
2405* Added `microsoftAuthBroker`; set it to `disabled` to force browser-based Microsoft 365 sign-in instead of the native Company Portal or Windows account broker.
2406* Added a "session expires soon" warning for Bedrock SSO and AWS-profile sign-in so you can re-authenticate before hitting an error.
2407* Added a `startupTimeoutSec` option for managed local (stdio) MCP servers and raised the default startup timeout from 10 to 120 seconds, fixing connection failures when a server command downloads packages on first run (for example `uvx` or `npx`).
2408* Added support for background agents: long-running tasks now stay signed in after your identity provider's access token expires.
2409* Added the ability for administrators to grant Microsoft 365 write scopes (send mail; edit calendars and files; send Teams chat; mailbox settings) through managed configuration.
2410* (breaking) Changed the default for Desktop Extensions (`.dxt` and `.mcpb`): they no longer load unless you set `isDesktopExtensionEnabled` to `true` in managed configuration. Previously they loaded by default and only the install UI was blocked.
2411* Updated `allowedPluginMarketplaces` (beta) so it can be delivered per-user through the bootstrap server; a response that omits the key leaves MDM-provisioned marketplaces in place.
2412* Fixed a one-time loss of sign-ins on some managed Windows machines after app data moved to a new location.
2413* Fixed AWS credentials not reaching the Code tab's terminal for Amazon Bedrock configurations that use IAM Identity Center.
2414* Fixed bundled Microsoft 365 and other MCP connectors failing to connect on networks with corporate TLS inspection (custom root CA).
2415* Fixed connection tests reporting false failures: the test now runs MCP helper scripts and checks managed configurations exactly as saved, and uses the same Azure AI Foundry endpoint that sessions use.
2416* Fixed managed MCP connectors failing with a credential-storage error when the server allows anonymous access.
2417* Fixed the Microsoft 365 connector failing to sign in on Macs enrolled with Microsoft Company Portal.
2418* Fixed the setup form incorrectly showing "Blocked address" for internal MCP or OAuth servers on IPv6 enterprise networks.
2419
2420**v1.18286.2**
2421
24222026-07-07
2423
2424**General**
2425
2426* Updated the embedded Claude Code engine to the latest version.
2427
2428**Code**
2429
2430* No user-facing changes.
2431
2432**Cowork**
2433
2434* No user-facing changes.
2435
2436**3P**
2437
2438* No user-facing changes.
2439
2440**v1.18286.0**
2441
24422026-07-02
2443
2444**General**
2445
2446* Fixed `apt update` failing on Linux after uninstalling a Claude that was installed from the apt repository.
2447* Fixed being asked to sign in repeatedly after a session expired while you were using the app; your in-progress message draft now returns when you sign back in within 10 minutes, and signing out still clears it.
2448* Fixed being unable to disable, delete, or uninstall plugins from GitHub-connected marketplaces, or to remove those marketplaces.
2449* Fixed pressing Enter not sending your message when an @mention had no matching results.
2450* Fixed remote SSH sessions getting stuck in a reconnect loop on very large messages, being lost when the computer woke from sleep mid-reconnect, and occasionally sending the same input twice after reconnecting.
2451* Fixed setup on Windows getting stuck retrying a download when the download folder was locked or inaccessible.
2452* Fixed the file-open spinner on Linux staying up after the download completed.
2453
2454**Code**
2455
2456* Added a "Choose folder" option to recover a session whose working folder is missing: the conversation forks into the folder you pick and the stuck session is archived.
2457* Added a "Switch organization" option on the "session not found" page so you can reopen a session link under the right organization.
2458* Added drag-to-reorder for queued messages, and Steer now works for messages that include images.
2459* Improved the Code tab's live preview: it now reports honest connection and loading status (including when a page arrives but never finishes loading, or a server overloads itself with requests), adds browser-style Back, Forward, and Reload/Stop controls, and lets you close other preview tabs.
2460* Fixed background tasks and workflows continuing to show as running after they finished, the session restarted, or the session was stopped.
2461* Fixed Remote Control sessions spinning forever with no error after you sent a message when the hosting computer was no longer connected.
2462* Fixed the sidebar project + button opening an empty prompt (or pointing at github.com) for GitHub Enterprise repositories.
2463
2464**Cowork**
2465
2466* Added click-to-zoom and drag-to-pan to the fullscreen image viewer.
2467* Fixed Computer Use teach mode where the Next and Exit buttons sometimes stopped responding until you switched apps and back, and cleared up teach-mode visuals so the screen-edge glow no longer flickers and the status indicator no longer sticks after you exit a guide.
2468* Fixed dictation dropping back to the text box when started from the mic button in existing sessions.
2469* Fixed document tools in cloud sessions acting on your local files instead of the session's files.
2470
2471**3P**
2472
2473* Added a usage breakdown by model family, source attribution, and usage tips to the `/usage` card.
2474* Removed automatic addition of Anthropic's default plugin marketplace on third-party deployments, and removed the `disableDefaultPlugins` managed configuration key (which had no effect there). Provision marketplaces via `allowedPluginMarketplaces` (beta).
2475
2476**v1.17377.2**
2477
24782026-07-01
2479
2480**General**
2481
2482* No user-facing changes.
2483
2484**Code**
2485
2486* No user-facing changes.
2487
2488**Cowork**
2489
2490* No user-facing changes.
2491
2492**3P**
2493
2494* Added Claude Fable 5 to the model picker for organizations with access.
2495
2496**v1.17377.1**
2497
24982026-06-30
2499
2500**General**
2501
2502* Added Linux support: Claude Desktop is now available for Debian and Ubuntu on x64 and arm64, installable as a .deb package.
2503* Updated the plugin Directory to show admin-configured marketplaces under the Organization tab and refresh them automatically when the source repository updates.
2504* Fixed plugin and skill downloads stalling for several minutes on a dead connection before retrying; stalled downloads now retry sooner.
2505* Fixed prompt and tool-detail content missing from OpenTelemetry exports for standard deployments that have not set an explicit content-capture policy; third-party deployments are unchanged.
2506* Changed zoom in and out to use smaller steps for finer control.
2507
2508**Code**
2509
2510* Added an integrated terminal pane and inline image previews in the transcript for SSH sessions.
2511* Added step-by-step progress and a Stop button while a session's worktree is being set up, so a long checkout on a large repository can be cancelled.
2512* Added a right-click menu in the Terminal pane with Copy, Paste, and Attach selection as context.
2513* Updated the transcript to mask API keys and tokens by default; click the eye icon to reveal them.
2514* Fixed folder access and cross-session requests being rejected after you approved them when permission mode was Auto or Bypass permissions.
2515* Fixed failed mid-turn message sends (for example, while offline) dropping your text instead of r
2412* Fixed an issue where permission prompts and in-session questions could silently stop appearing after an input-handling error — if Claude asked a question or requested permission and the prompt never showed up, this release fixes that. (Upd
third-party/claude-desktop/configuration Changed · +171 / -26 lines
#### `enforceConsoleSignInOrgList` #### `remoteFileDownloads` #### `autoModeClassifierModel` #### `builtinBrowserClientCertificateHosts` ### `deploymentLogo`
from line 57
5757| [`inferenceFoundryTenantId`](#inferencefoundrytenantid) | Entra ID tenant ID | Connection | Admin Console |
5858| [`inferenceFoundryClientId`](#inferencefoundryclientid) | Entra ID client ID | Connection | Admin Console |
5959| [`inferenceFoundryAuthFlow`](#inferencefoundryauthflow) | Entra ID sign-in flow | Connection | Admin Console |
60| [`enforceConsoleSignInOrgList`](#enforceconsolesigninorglist) | Enforce Required organization for Claude Console sign-in | Connection | |
6061| [`modelDiscoveryEnabled`](#modeldiscoveryenabled) | Model discovery | Connection | Admin Console |
6162| [`modelPrefer1mContext`](#modelprefer1mcontext) | Use 1M wherever it’s available | Connection | Admin Console |
6263| [`inferenceModels`](#inferencemodels) | Model list | Connection | Admin Console |
from line 75
7475| [`sshConfigs`](#sshconfigs) | SSH connections | Capabilities | Admin Console |
7576| [`sshClientPath`](#sshclientpath) | SSH client program | Capabilities | Admin Console |
7677| [`sshTransport`](#sshtransport) | SSH connection engine | Capabilities | Admin Console |
78| [`remoteFileDownloads`](#remotefiledownloads) | SSH and WSL file downloads | Capabilities | Admin Console |
7779| [`chatTabEnabled`](#chattabenabled) | Allow Chat | Capabilities | Admin Console |
7880| [`desktopHome`](#desktophome) | Desktop home | Capabilities | Admin Console |
7981| [`chatAdvancedFileAnalysisEnabled`](#chatadvancedfileanalysisenabled) | Advanced file analysis | Capabilities | Admin Console |
from line 83
8183| [`allowedWorkspaceFolders`](#allowedworkspacefolders) | Allowed workspace folders | Capabilities | Admin Console |
8284| [`blockReadsOutsideWorkingDirectories`](#blockreadsoutsideworkingdirectories) | Block reads outside working directories | Capabilities | Admin Console |
8385| [`autoModeEnabled`](#automodeenabled) | Allow Auto mode | Capabilities | Admin Console |
86| [`autoModeClassifierModel`](#automodeclassifiermodel) | Auto mode classifier model | Capabilities | Admin Console |
8487| [`disableBypassPermissionsMode`](#disablebypasspermissionsmode) | Disable bypass permissions mode | Capabilities | Admin Console |
8588| [`disableBundledSkills`](#disablebundledskills) | Disable bundled skills and workflows | Capabilities | Admin Console |
8689| [`skillCreationEnabled`](#skillcreationenabled) | Allow user-created skills | Capabilities | Admin Console |
from line 112
109112| [`builtinBrowserDefaultDomainPolicy`](#builtinbrowserdefaultdomainpolicy) | Default site policy in the built-in browser | Capabilities | Admin Console |
110113| [`builtinBrowserAllowedDomains`](#builtinbrowseralloweddomains) | Allowed sites in the built-in browser | Capabilities | Admin Console |
111114| [`builtinBrowserBlockedDomains`](#builtinbrowserblockeddomains) | Blocked sites in the built-in browser | Capabilities | Admin Console |
115| [`builtinBrowserClientCertificateHosts`](#builtinbrowserclientcertificatehosts) | Sites allowed a client certificate in the built-in browser and preview panes | Capabilities | |
112116| [`claudeAiImport`](#claudeaiimport) | Claude.ai data import | Capabilities | Admin Console |
113117| [`managedMcpServers`](#managedmcpservers) | Managed MCP servers | Connectors | Admin Console |
114118| [`mcpPersistentAlwaysAllowEnabled`](#mcppersistentalwaysallowenabled) | Allow persistent tool approvals | Connectors | Admin Console |
from line 157
153157| [`endUserAttribution`](#enduserattribution) | End-user attribution | Appearance | Admin Console |
154158| [`deploymentDisplayName`](#deploymentdisplayname) | Deployment display name | Appearance | Admin Console |
155159| [`deploymentDisplaySubtitle`](#deploymentdisplaysubtitle) | Deployment display subtitle | Appearance | |
160| [`deploymentLogo`](#deploymentlogo) | Deployment logo | Appearance | |
156161| [`disableConfigDeprecationWarnings`](#disableconfigdeprecationwarnings) | Hide configuration deprecation warnings | Appearance | Admin Console |
157162| [`organizationAnnouncement`](#organizationannouncement) | Organization announcement | Appearance | Admin Console |
158163| [`banner`](#banner) | Organization banner | Appearance | Admin Console |
from line 1106
11011106
11021107***
11031108
1109### Authentication
1110
1111#### `enforceConsoleSignInOrgList`
1112
1113boolean
1114
1115MDM only (You can set the key only in an MDM profile or the local configuration file. Claude Desktop ignores it in a bootstrap server's response. Where a key's description says MDM profile only, the local configuration file does not count either.)
1116
1117Since 5.11492.0
1118
1119**Enforce Required organization for Claude Console sign-in.** Only organizations in Required organization can sign in with Claude Console. Off or unset: others still work, with a warning.
1120
1121[Admin Console](#the-works-with-column): Not available.
1122
1123> [accordion] More detail
1124>
1125> MDM profile only. Applies where the profile sets `forceLoginOrgUUID` and uses Claude Console sign-in with the Anthropic (Claude API) provider.
1126>
1127> Off or unset, an unlisted organization’s sign-in still works, with a configuration warning in main.log. When on, Chat, Cowork, and Code don’t start on it, and the app renews the saved sign-in with Anthropic at each launch. If that fails, no session starts.
1128>
1129> Before you turn it on, add your Claude Console organization’s ID to the list. Your Claude organization’s ID doesn’t cover it. People with a key saved by an earlier version must then sign in again. An unreadable value counts as on, and a `[]` or unreadable list then allows no organization. Update all devices first. An earlier version ignores this key, and on Linux can reject the whole file.
1130
1131***
1132
11041133### Models
11051134
11061135#### `modelDiscoveryEnabled`
from line 1512
14831512
14841513***
14851514
1515#### `remoteFileDownloads`
1516
1517enum
1518
1519Beta (The feature that the key configures is in beta.)
1520
1521Since 5.1231.0
1522
1523**SSH and WSL file downloads.** Which files users can download from an SSH host or WSL in Code. Unset: documents, images, and small text files.
1524
1525One of: `all`, `limited`, `none`
1526
1527[Guide for this setting](https://claude.com/docs/third-party/claude-desktop/ssh-remote-sessions.md)
1528
1529> [accordion] More detail
1530>
1531> `all` is a new way to take files off a host in bulk where devices block `ssh`, with no app log of the files downloaded.
1532>
1533> `none` is not a security boundary: users can still open the files.
1534>
1535> In an MDM profile:
1536>
1537> * Update all devices first: older versions can lose settings.
1538> * If MDM sets your connection keys, set it beside them. On Windows, machine policy hides per-user policy.
1539> * Alone or beside app-behavior keys, it wins over the console. Otherwise a server or console that omits it wins.
1540> * Alone, it marks the device as managed, like any key. Among other things, WSL sessions need a machine-wide `disableWslSessions` of `false`: see its help. Shell commands can lose network until the user lists hosts in Setup. `coworkEgressAllowedHosts` here would replace the user's configuration.
1541
1542***
1543
14861544### Chat surface
14871545
14881546#### `chatTabEnabled`
from line 1697
16391697
16401698***
16411699
1700#### `autoModeClassifierModel`
1701
1702stringSince 5.11492.0
1703
1704**Auto mode classifier model.** The model that Claude Code’s built-in safety check uses to review actions. If unset, Claude Code chooses the model.
1705
1706> [accordion] More detail
1707>
1708> Actions your provider reviews itself don't use this model.
1709>
1710> Use your provider's ID for an Anthropic model, or this setting counts as unset. If you set `inferenceModels`, also list the ID there and in any group's model list. If your provider lacks the model, the built-in safety check blocks every action it reviews.
1711>
1712> Don't use Claude Opus 5, Sonnet 5.5 or Opus 5.5: they can't do this review. Weaker models may allow what the default would block.
1713
1714***
1715
16421716#### `disableBypassPermissionsMode`
16431717
16441718booleanSince 1.46388.1
from line 1909
18351909
18361910object: name → valueSince 1.8089.0
18371911
1838**Built-in tool policy.** Approval per tool or rule such as Bash(curl \*). “ask” prompts the user before each matching call. To block, use Disabled built-in tools.
1912**Built-in tool policy.** Approval per tool or rule such as Bash(curl \*). With “ask”, each matching call needs user approval. To block, use Disabled built-in tools.
18391913
18401914> [accordion] More detail
18411915>
from line 2159
20852159
20862160***
20872161
2162#### `builtinBrowserClientCertificateHosts`
2163
2164string\[]
2165
2166MDM only (You can set the key only in an MDM profile or the local configuration file. Claude Desktop ignores it in a bootstrap server's response. Where a key's description says MDM profile only, the local configuration file does not count either.)
2167
2168Since 5.11492.0
2169
2170**Sites allowed a client certificate in the built-in browser and preview panes.** Sites that get a client certificate from the device’s store when they ask for one in the built-in browser or a preview pane. Unset: none.
2171
2172[Admin Console](#the-works-with-column): Not available.
2173
2174> [accordion] More detail
2175>
2176> Entries use the `coworkEgressAllowedHosts` format: `host`, `host:port`, or `*.example.com` for its subdomains only. An IPv6 address goes in brackets, such as `[2001:db8::5]`, and a single-label name such as `intranet` is matched exactly. A bare `*` admits every site, as before this setting. A listed site, such as a TLS-inspecting proxy, gets the first matching certificate without asking. Other sites get none from these panes, which also make no background requests to a host you declared unless an entry names it. The app’s own windows and connections are unaffected. Only machine-wide device management can set it: a value from per-user Windows policy or the local configuration file is shown but not applied. A change applies at the next start.
2177
2178***
2179
20882180### Claude.ai data import
20892181
20902182#### `claudeAiImport`
from line 2211
21192211>
21202212> > [accordion] More detail
21212213> >
2122> > Unset is off, except in Admin Console organizations, where it is on unless an admin turns it off. Without the Admin Console, also set `deploymentOrganizationUuid`. Only sessions stored before you set it are copied.
2214> > Unset is off except in Admin Console organizations. Without the Admin Console, also set `deploymentOrganizationUuid`: only sessions stored before you set it are copied.
21232215> >
2124> > Without asking the user, it brings back more than sessions, including:
2216> > Most copied Cowork and Chat sessions continue with no prompt to confirm. Without asking, it copies more, including:
21252217> >
2126> > * The user's Cowork memory, global instructions, Instructions for Claude and project descriptions, which are used at once, unreviewed.
2127> > * The folders connected to Cowork projects and sessions. Claude can read and change their files, as under the earlier configuration.
2128> > * Scheduled tasks. A task that was on runs at its next scheduled time.
2129> > * Uploaded plugins, unless `userPluginUploadsEnabled` is off. They can run programs on the device.
2218> > * Cowork memory, global instructions, Instructions for Claude and project descriptions, used at once, unreviewed.
2219> > * Folders connected to Cowork projects and sessions. Claude can read and change their files.
2220> > * Scheduled tasks, which run on schedule if they were on. A task in Auto or bypass permissions mode gets Auto mode if its tab then offers it (`autoModeEnabled`).
2221> > * Uploaded plugins, unless `userPluginUploadsEnabled` is off. They can run programs.
21302222> > * Saved skills, unless `skillCreationEnabled` is off.
21312223>
21322224> **exportEnabled** `boolean` (default: false)
from line 2278
21862278>
21872279> **toolPolicy** `object: name → value`
21882280>
2189> Sets approval for listed tools, and users choose the rest, but “allow” doesn’t pre-approve tools in Code sessions on the device or over SSH.
2281> Sets approval for listed tools. A plugin’s own code can call unlisted tools without approval. To stop that, add them as “blocked”.
21902282>
21912283> > [accordion] More detail
21922284> >
2193> > Also applies to an installed plugin's server that matches this entry by URL, or else by name (letter case is ignored).
2285> > `allow` does not pre-approve Claude's own calls in Code sessions on the device or over SSH.
21942286> >
2287> > The policy also applies to an installed plugin's server that matches this entry by URL, or else by name. Use the server's exact name.
2288> >
21952289> > * That server follows this entry instead of `orgPluginSettings`, even if the entry sets no `toolPolicy`. A built-in entry (one with `server`) applies only if it sets one. A local entry applies only where it has a `command`.
21962290> > * For a server that only a plugin runs, use an entry with `transport: "policy-only"`.
21972291> > * Claude Code runs or connects to some plugin servers itself. For those: Claude Code's own managed settings take priority by default.
from line 2329
22352329> > **scope** `string`
22362330> >
22372331> > What the server may request at sign-in. If blank, Desktop’s default read set is used.
2332> >
2333> > **sensitivityLabels** `object[]`
2334> >
2335> > Blocks Outlook email and Word, Excel, PowerPoint, PDF and MP4 files in OneDrive and SharePoint with these Purview labels.
2336> >
2337> > > [accordion] More detail
2338> > >
2339> > > * **Checked:** files by extension, and email with its attachments by the email's label. Word, Excel, PowerPoint and PDF attachments are also checked by their own label, except .doc, .xls and .ppt attachments. OneNote, Loop and Whiteboard items are refused.
2340> > > * **Not checked:** new files and new email, calendar events, Teams messages, site pages and meeting transcripts. Nor are files in a folder that is moved, copied or deleted.
2341> > > * **Search** can show a blocked file's name or an email's headers until Microsoft indexes the label.
2342> > > * **Tenant:** `tenantId` must be your tenant's GUID. Give other Microsoft 365 entries that can reach your tenant the GUID and this list too, or remove them.
2343> > >
2344> > > Update all devices first: an older version blocks only files, or nothing.
2345> >
2346> > > [accordion] Child attributes (2)
2347> > >
2348> > > **sensitivityLabels.labelId** `string` *required*
2349> > >
2350> > > The Purview label’s GUID, not its name. A parent label does not cover its sublabels: list each sublabel too.
2351> > >
2352> > > **sensitivityLabels.effect** `string` *required*
2353> > >
2354> > > What the connector does with files and email that carry the label. The only effect is “block”: the connector refuses to read or change them.
22382355>
22392356> > [tab] websearch
22402357> >
from line 2424
23072424> > > * A local (`stdio`) entry can repeat `command`, `args`, `env`, `envHelper` and `envHelperArgs`.
23082425> > > * A remote or web search entry can repeat `headersHelper` and `headersHelperArgs`. If it gives `headersHelper` here, it needs its own too.
23092426> > > * A mistake under any operating system drops the server on all of them.
2310> > > * Older versions ignore this setting and use the entry's own values. They and some later versions drop an entry with no `command` of its own. Until all devices are updated, put the Windows values in the entry itself.
2427> > > * Older versions ignore this setting and use the entry's own values. They and some later versions drop a local entry with no `command` of its own. Until all devices are updated, put the Windows values in the entry itself.
23112428> >
23122429> > > [accordion] Child attributes (3)
23132430> > >
from line 2472
23552472> >
23562473> > > [accordion] More detail
23572474> > >
2358> > > Every tool that can change something asks before each call unless `toolPolicy` says otherwise.
2475> > > Every tool that can change something needs approval for each call unless `toolPolicy` says otherwise.
23592476> > >
23602477> > > These tools cannot be set looser than `ask`, and `allow` is treated as `ask`: `merge_pull_request`, `push_files`, `create_or_update_file`, `delete_file`, `actions_run_trigger`, `pull_request_review_write`, `delete_repository`. Where no prompt can be shown, their calls are refused.
23612478> >
from line 2681
25642681> > > * A local (`stdio`) entry can repeat `command`, `args`, `env`, `envHelper` and `envHelperArgs`.
25652682> > > * A remote or web search entry can repeat `headersHelper` and `headersHelperArgs`. If it gives `headersHelper` here, it needs its own too.
25662683> > > * A mistake under any operating system drops the server on all of them.
2567> > > * Older versions ignore this setting and use the entry's own values. They and some later versions drop an entry with no `command` of its own. Until all devices are updated, put the Windows values in the entry itself.
2684> > > * Older versions ignore this setting and use the entry's own values. They and some later versions drop a local entry with no `command` of its own. Until all devices are updated, put the Windows values in the entry itself.
25682685> >
25692686> > > [accordion] Child attributes (3)
25702687> > >
from line 2810
26932810> > > * A local (`stdio`) entry can repeat `command`, `args`, `env`, `envHelper` and `envHelperArgs`.
26942811> > > * A remote or web search entry can repeat `headersHelper` and `headersHelperArgs`. If it gives `headersHelper` here, it needs its own too.
26952812> > > * A mistake under any operating system drops the server on all of them.
2696> > > * Older versions ignore this setting and use the entry's own values. They and some later versions drop an entry with no `command` of its own. Until all devices are updated, put the Windows values in the entry itself.
2813> > > * Older versions ignore this setting and use the entry's own values. They and some later versions drop a local entry with no `command` of its own. Until all devices are updated, put the Windows values in the entry itself.
26972814> >
26982815> > > [accordion] Child attributes (3)
26992816> > >
from line 2859
27422859> > >
27432860> > > For a `policy-only` entry:
27442861> > >
2745> > > * Set `name` to the server's name as the plugin declares it (letter case is ignored), and `toolPolicy` to the permissions. A name that matches no installed plugin server does nothing.
2862> > > * Set `name` to the server's name as the plugin declares it, capitals included. Set `toolPolicy` to the permissions. A name that matches no installed plugin server does nothing.
27462863> > > * It takes priority over `orgPluginSettings` for that server. With no `toolPolicy`, the server is left unrestricted.
27472864> > > * An older version drops the entry and applies `orgPluginSettings` instead. Until all devices are updated, keep the same permissions there, and do not deploy a list made only of `policy-only` entries.
27482865
from line 2897
27802897
27812898booleanDefault: trueSince 1.2581.0
27822899
2783**Allow local MCP servers.** Lets users run local (stdio) MCP servers added in Developer settings. On third-party deployments, off also stops plugins’ local servers.
2900**Allow local MCP servers.** Lets users run local (stdio) MCP servers added in Developer settings. On third-party deployments, off also stops plugins’ local MCP servers.
27842901
27852902> [accordion] More detail
27862903>
2787> On third-party deployments, `false` covers `.mcpb` bundles and plugins from every marketplace, your organization's included. Plugins in the org-plugins directory on the device are not affected. In Code, it also stops the local servers that a user or a project configures for Claude Code.
2904> On third-party deployments, `false` covers `.mcpb` bundles and plugins from every marketplace, your organization's included. In Code there, it also stops a user's or a project's own local MCP servers. Plugins in the org-plugins directory on the device are not affected.
27882905>
2789> When `false` comes from an MDM profile, the app starts only the local `managedMcpServers` entries in that same profile, exactly as written there. A `false` from any other source does not do this.
2906> Other plugin code, such as hooks and language servers, is not covered.
27902907>
2908> A `false` from an MDM profile limits local `managedMcpServers` entries to those in that same profile, exactly as written there.
2909>
27912910> Claude Code's own managed settings take priority by default.
27922911
27932912***
from line 3119
30003119
30013120**OTLP endpoint.** Where OpenTelemetry logs and metrics are sent. Leave blank to disable.
30023121
3122> [accordion] More detail
3123>
3124> Code sessions on an SSH host or in WSL send to this collector too. Their telemetry includes `process.owner` (the OS login name on the computer that runs the app) and, unless `endUserAttribution` is off, `enduser.id`.
3125>
3126> An SSH host must be able to reach the address. If the address is a loopback address, sessions over SSH send nothing to it.
3127
30033128***
30043129
30053130#### `otlpProtocol`
from line 3315
31903315> * Only time with the app open and the device awake counts toward the hours.
31913316> * Idle means 10 minutes without input. Where the system reports no idle time, as some Wayland sessions do, an unset key never restarts: set a number.
31923317> * The restart waits while Claude is mid-task on the device.
3318> * With no number set, on macOS it also waits while the keychain is locked, for up to 72 hours.
31933319>
31943320> It is an app-behavior key. If your MDM profile holds only such keys, a user's or bootstrap server's value for one is ignored: put all you use there.
31953321
from line 3329
32033329
32043330> [accordion] More detail
32053331>
3206> * **Unset:** after 72 hours the app restarts once the device has been idle for 10 minutes.
3332> * **Unset:** after 72 hours the app restarts once the device has been idle for 10 minutes. On macOS, it also waits while the keychain is locked, for up to 72 hours.
32073333> * **Any number, even 72:** the app restarts when the time is up, whether or not the user is active.
32083334>
32093335> In both cases the restart waits while Claude is mid-task on the device, or while the update server gives no answer.
from line 3584
34583584
34593585***
34603586
3587### `deploymentLogo`
3588
3589stringSince 5.11492.0
3590
3591**Deployment logo.** A logo shown beside the Organization announcement. Paste a PNG image as a base64 data: URI. Unset: no logo.
3592
3593[Admin Console](#the-works-with-column): Not available.
3594
3595> [accordion] More detail
3596>
3597> * **Form:** `data:image/png;base64,` and then the file's base64 text. Line breaks are ignored. A web address is not read.
3598> * **Size:** up to 32,768 characters, a file of about 24 KB, and 1,024 pixels a side.
3599> * **Shape:** a picture that is not square is cropped.
3600> * **MDM:** alone in a profile, or with app-behavior keys only, it keeps other settings. Such a profile has the costs listed under `organizationAnnouncement`: read them first.
3601
3602***
3603
34613604### `disableConfigDeprecationWarnings`
34623605
34633606booleanSince 1.40609.0
from line 3687
35443687
35453688**Status line.** Claude runs this program and shows the first line it prints above the message box in Cowork, Chat and Code. Off unless set.
35463689
3690[Guide for this setting](https://claude.com/docs/third-party/claude-desktop/status-line.md)
3691
35473692> [accordion] More detail
35483693>
35493694> * **Runs:** on the user's device, as the signed-in user. When: a session opens, a turn ends or its result arrives, the app regains focus or the model changes.
from line 3910
37653910>
37663911> **serverName** `string` *required*
37673912>
3768> Name of the plugin-delivered MCP server this policy applies to.
3913> Name of the plugin-delivered MCP server this policy applies to, as the plugin declares it, capitals included.
37693914>
37703915> **tools** `object[]`
37713916>
from line 3924
37793924> >
37803925> > **tools.permission** `enum` *required*
37813926> >
3782> > Approval state locked for this tool. Unlisted tools stay user-controlled.
3927> > Locks approval for this tool. A plugin’s own code can call unlisted tools without approval. To stop that, add them as “blocked”.
37833928> >
37843929> > One of: `allow`, `ask`, `blocked`
37853930
third-party/claude-desktop/configuration-changelog Changed · +55 / -0 lines
from line 4
44
55Configuration keys by Claude Desktop release. Each section lists keys added in that release, with the MDM key name (for plist/registry deployment) and the equivalent JSON shape (for local-file or bootstrap remote configuration).
66
7**v5.11492.0**
8
92026-11-12
10
11| MDM key | Type | Description |
12| - | - | - |
13| [`remoteFileDownloads`](https://claude.com/docs/third-party/claude-desktop/configuration#remotefiledownloads) · Beta | `enum` | SSH and WSL file downloads |
14| [`autoModeClassifierModel`](https://claude.com/docs/third-party/claude-desktop/configuration#automodeclassifiermodel) | `string` | Auto mode classifier model |
15| [`builtinBrowserClientCertificateHosts`](https://claude.com/docs/third-party/claude-desktop/configuration#builtinbrowserclientcertificatehosts) | `string[]` | Sites allowed a client certificate in the built-in browser and preview panes |
16| [`enforceConsoleSignInOrgList`](https://claude.com/docs/third-party/claude-desktop/configuration#enforceconsolesigninorglist) | `boolean` | Enforce Required organization for Claude Console sign-in |
17| [`deploymentLogo`](https://claude.com/docs/third-party/claude-desktop/configuration#deploymentlogo) | `string` | Deployment logo |
18
19**JSON (e.g. for non-MDM users or Bootstrap):**
20
21```json theme={null}
22{
23 "codeSurface": {
24 "remoteFileDownloads": "<all|limited|none>"
25 },
26 "workspace": {
27 "autoModeClassifierModel": "<string>"
28 },
29 "builtinBrowser": {
30 "clientCertificateHosts": ["<string>"]
31 },
32 "authentication": {
33 "enforceConsoleSignInOrgList": "<boolean>"
34 },
35 "appearance": {
36 "deploymentLogo": "<string>"
37 }
38}
39```
40
41`builtinBrowserClientCertificateHosts` is read at launch, from machine-wide device management only. A value in a local configuration file or in per-user Windows policy, or served by a bootstrap server or the Admin Console, is ignored.
42
43`enforceConsoleSignInOrgList` is read from a device profile only. A value in a local configuration file, or served by a bootstrap server or the Admin Console, is ignored.
44
45Versions 5.1231.0 and later already read `remoteFileDownloads`. It is new in the configuration reference.
46
47Update all devices before you put any of these keys in a device profile. Older versions on Linux can refuse a profile with any key they do not know, and older versions on Windows refuse a profile with only such keys. The settings made in Setup then stop applying as well. The exception is `builtinBrowserClientCertificateHosts`: to keep sites working through the update, add it first on macOS, and in a Windows policy that sets other keys.
48
49A profile with `autoModeClassifierModel` or `enforceConsoleSignInOrgList` replaces the settings made in Setup, in this version too. A profile with only the other three keys leaves them in place.
50
51As with any device profile, a computer's first one also blocks WSL sessions until `disableWslSessions` is set to `false` machine-wide (see that key's help). Where settings were made in Setup, it also cuts off network access for Code's shell commands on macOS and Linux until `coworkEgressAllowedHosts` is set. If the profile leaves those settings in place, set that key in Setup. In the profile, it would replace them.
52
53**Changed:**
54
55* **Breaking:** the built-in browser and preview panes now send a client certificate only to sites listed in `builtinBrowserClientCertificateHosts`. Other sites that require one stop loading there. Behind a proxy that requires one, list the proxy as `host:port`, or use `*` if it asks during each site's own connection. A device with no device management can't list any site.
56* `managedMcpServers`: `sensitivityLabels` on a Microsoft 365 entry is now documented. It blocks Outlook email and Word, Excel, PowerPoint, PDF and MP4 files in OneDrive and SharePoint with the Purview labels you list. Update first: versions before 5.1231.0 block only files, or nothing.
57* `managedMcpServers`: the published bootstrap schemas now require `command` or `platformOverrides` on a local (`stdio`) entry. They do not look inside `platformOverrides`, so the app can still drop an entry that passes.
58* `claudeAiImport`: with `automatic3pImport`, most Cowork and Chat sessions copied by this version or later continue with no prompt to confirm. A scheduled task on Auto or Skip all approvals arrives on Auto. For a Cowork task, that needs `autoModeEnabled` set to `true`. For a Code task, it needs the key not set to `false`.
59* `autoUpdaterEnforcementHours` and `installedUpdateEnforcementHours`: with no number set, the restart on macOS now also waits while the keychain is locked, for up to 72 hours. With a number set, a locked keychain doesn't delay it.
60* `coworkTabEnabled`, `chatTabEnabled` and `chatAdvancedFileAnalysisEnabled`: this release and later show users no in-app warning. Versions 4.16336.0 to 5.1231.2 can still show it from November 17, 2026 while one is still set. Logs and the diagnostic report still list them.
61
762**v5.1231.2**
863
9642026-11-10
claude-tag/admins/attribute-costs Changed · +1 / -1 lines
from line 26
2626 --header "x-api-key: $ANALYTICS_API_KEY"
2727```
2828
29`products[]=claude-tag` limits the report to the work that bills to your organization's usage balance: Claude's work in Slack channels, and [DMs from members who haven't connected a Claude account](https://claude.com/docs/claude-tag/admins/restrict-access.md#direct-messages-from-members-without-a-claude-account). One-to-one DMs from members who have connected a Claude account bill to the sender's own seat and aren't reported under `claude-tag`, so this filter leaves them out.
29`products[]=claude-tag` limits the report to Claude's usage in Slack, such as Claude's work in channels and [DMs from members who haven't connected a Claude account](https://claude.com/docs/claude-tag/admins/restrict-access.md#direct-messages-from-members-without-a-claude-account). One-to-one DMs from members who have connected a Claude account bill to the sender's own seat and are reported under `claude-tag` too, so this filter includes them.
3030
3131Each row's `claude_tag_user_id` is a Slack user ID such as `U0123ABCDEF`, not a claude.ai user ID. A row with a null `claude_tag_user_id` is channel spend with no attributed user, and [How costs map to users](#how-costs-map-to-users) lists those cases. For the full parameters, response schema, and data freshness, see the [cost report reference](https://platform.claude.com/docs/en/api/admin/analytics/cost/list), which also covers grouping by `slack_channel_id` and `claude_tag_category`.
3232