Deploy with a bootstrap server changedthird-party/claude-desktop/bootstrap
Nearest release: v2.1.314, published 6 hours after upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 29 Oct 2026 17:39 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 30 Oct 2026 18:07 UTC.
Upstream edited
Recorded here
Lines+7added
Lines−7removed
From line
355
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits33to this page, all time
The whole hunk
from line 355, old and new numbered
/
from line 355
355355| `$schemaVersion` | `integer` | Wire-format marker: `2` for the nested format (bootstrap-config-v2, what the app's own JSON export writes), `1` for the flat format (bootstrap-config-v1). Optional: the client infers the format from the document shape; set it to state the format explicitly. |
356356| `expiresAt` | `number` | Unix epoch (seconds or milliseconds) after which the client should re-fetch this document. Optional; when absent the client uses its default refresh interval. |
357357
358> **\$schemaVersion details**
358> [accordion] \$schemaVersion details
359359>
360360> Omitted → the client infers the version from the document shape (any cluster key present → 2, otherwise 1).
361361
362> **expiresAt details**
362> [accordion] expiresAt details
363363>
364364> Omitted → cache for 1 hour. A number ≥ 10¹² is read as Unix epoch **milliseconds**; below that, **seconds**.
365365>
from line 409
409409
410410**Bootstrap OIDC parameters.** Your organization’s OpenID Connect identity provider. The user’s token from a browser sign-in is sent as Bearer to the bootstrap server.
411411
412> **More detail**
412> [accordion] More detail
413413>
414414> When unset, the bootstrap sign-in uses a device code on the bootstrap server's own origin.
415415>
416416> In an MDM profile, write this key as one JSON string. Separate values such as `bootstrapOidc.clientId` do not work: the app silently uses the device-code sign-in instead.
417417
418> **Child attributes (8)**
418> [accordion] Child attributes (8)
419419>
420420> **clientId** `string` *required*
421421>
from line 451
451451>
452452> Space-separated hostnames also accepted as the referrer of the sign-in callback, besides the authorization URL’s host.
453453>
454> > **More detail**
454> > [accordion] More detail
455455> >
456456> > If a callback is rejected for a referrer mismatch, the app log names the rejected host. Add that hostname here.
457457
from line 467
467467
468468**Bootstrap request headers.** HTTP headers sent on every bootstrap config fetch. Use this instead of embedding user:pass@ in the URL.
469469
470> **More detail**
470> [accordion] More detail
471471>
472472> If `bootstrapOidc` is unset, the app treats these headers as sufficient authentication and requires no per-user sign-in for the bootstrap fetch.
473473>
from line 487
487487
488488**Bootstrap headers helper script.** Absolute path to an executable that prints a JSON object of bootstrap request headers. Merged over the static headers; the helper wins.
489489
490> **More detail**
490> [accordion] More detail
491491>
492492> Example output: `{"Authorization": "Bearer …"}`. The app runs the helper script with no arguments and reuses its output for a few minutes.
493493>
No line in this hunk matches that.