Docs search: credentials / page 10 of 12 / Source Intelligence

Troubleshoot your connector Claude Documentation · in the page connectors/building/troubleshooting …ument_supported": true` (CIMD), or you should be using pre-registered credentials. In a cross-host setup, run the protected-resource curl against your MCP server and the two authorization-server curls…

Add a connector that isn't in the directory Claude Documentation · in the page connectors/custom/add-unlisted …the server URL** Enter the remote MCP server URL. **4. Enter OAuth credentials if needed** Optionally, enter an OAuth client ID and secret. See [Choose authentication settings](#choose-authenticat…

MCP tunnels Claude Documentation · in the page connectors/mcp-tunnels/overview …a schedule and immediately after any suspected exposure. See [Rotate credentials](https://claude.com/docs/connectors/mcp-tunnels/setup.md#rotate-credentials). ## Limits * An organization can have u…

Set up an MCP tunnel Claude Documentation · in the page connectors/mcp-tunnels/setup …lm if you run Kubernetes. The chart provisions the tunnel, stores the credentials in a Secret, and renews the server certificate automatically. Choose Docker Compose for a single host or a VM, where y…

Troubleshoot MCP tunnels Claude Documentation · in the page connectors/mcp-tunnels/troubleshooting …able by user ID `65532`. To renew an expired certificate, see [Rotate credentials](https://claude.com/docs/connectors/mcp-tunnels/setup.md#rotate-credentials). ## Connectors and tools ### Adding the…

Changelog Claude Documentation · in the page cowork/changelog …connectors configured with their own OAuth client connecting without credentials, instead of prompting for sign-in, when the server accepts unauthenticated connections. * Fixed Microsoft 365 connecto…

Your account Claude Documentation · in the page government/account/overview …sion you are currently using. Whether your next sign-in asks for your credentials depends on your agency's single sign-on setup. > **For organization owners and tenant administrators:** The footer al…

Connectors Claude Documentation · in the page government/connectors/overview …selects how Claude proves who it is to the server. **None** sends no credentials. **Header (shared secret)** sends a fixed header (for example, an authorization token) with every request; the value i…

Connect Claude Code to Claude for Government Claude Documentation · in the page government/deploy-claude-code/configure …eploy-desktop/configure#the-managed-setting). The address contains no credentials. ### Before sign-in Your organization's settings reach Claude Code only after a user has signed in. Until then, the…

Connect Claude Desktop to Claude for Government Claude Documentation · in the page government/deploy-desktop/configure …s is the same for every device and user in your agency and carries no credentials or user information, so the same profile is safe to push to your whole fleet. A request to the address without a signe…

Compliance API Claude Documentation · in the page government/org-admin/compliance-api …ns** such as `org.created`, `org.renamed`, and `org.deactivated`. * **Credentials** such as `api_key.created` and `api_key.revoked`. * **Seats and tiers** such as `seat_allocation.set`, `seat_allocati…

Security and data handling Claude Documentation · in the page government/security/security-and-data-handling …isolation, network egress and required domains, approvals, connector credentials, telemetry, and where data is stored. > **Who this is for:** Security, compliance, and IT reviewers who are assessing…

Tenant administration Claude Documentation · in the page government/tenant-admin/overview …nect single sign-on so that people can authenticate with their agency credentials, optionally connect SCIM provisioning so that your directory syncs users and groups automatically, and add at least on…

Tenant restrictions Claude Documentation · in the page government/tenant-admin/tenant-restrictions …A tenant restriction can only narrow access. A user still needs valid credentials for a tenant on the list; the header never grants access to a tenant the user does not already belong to. ## Configur…

Data storage and retention Claude Documentation · in the page office-agents/data-storage …d retention > Where Claude for M365 stores chat history, skills, and credentials on each user's device, why reinstalling or switching add-ins keeps that data, and how long it is kept. Claude for M36…

Configure a custom OpenTelemetry collector Claude Documentation · in the page office-agents/opentelemetry …](https://claude.com/docs/office-agents/third-party-platforms.md#keep-credentials-out-of-the-manifest-url-query-string). ```text theme={null} https://pivot.claude.ai/taskpane.html?otlp_endpoint=https…

Use Claude for Outlook Claude Documentation · in the page office-agents/outlook …he Claude button in the message ribbon, and sign in with their Claude credentials. Pinning the task pane keeps it open as you move between messages. > [!WARNING] > > Organizations that have disabled…

Use Claude for PowerPoint Claude Documentation · in the page office-agents/powerpoint …see Claude in PowerPoint's Home ribbon and sign in with their Claude credentials on first use. ### Connect through a third-party platform If your organization routes AI traffic through Amazon Bedro…

Use Claude for M365 with third-party platforms Claude Documentation · in the page office-agents/third-party-platforms …'s IT team manages these resources. Anthropic cannot provide or reset credentials. ## Network allowlist The add-in requires access to specific domains. The required domains differ depending on wheth…

Use Claude for Word Claude Documentation · in the page office-agents/word …users see Claude in Word's Home ribbon and sign in with their Claude credentials on first use. ### Connect through a third-party platform If your organization routes AI traffic through Amazon Bedro…

Roll out a plugin to your whole organization Claude Documentation · in the page plugins/org-rollout …the marketplace itself. For a private Git repository, it uses the Git credentials already on that machine. | | Which components load | Depends on the surface. See [Plugin feature support across platfo…

Sync your organization's plugins from a repository Claude Documentation · in the page plugins/org-sync …Members don't need access to the repository themselves, and their Git credentials aren't involved. Organization sync reads the marketplace repository's default branch through your organization's GitHu…

Plugin pre-submission checklist Claude Documentation · in the page plugins/pre-submission-checklist …may use a custom registry or package source** when held | | Keep real credentials out of every file, documentation and examples included. Ask for each value through a `userConfig` entry in `plugin.jso…

Create custom skills Claude Documentation · in the page skills/how-to …pprove more than you intend. Don't put API keys, passwords, or other credentials in a script or anywhere else in the skill: everyone you share the skill with receives its files. When a script needs t…

Deploy with Enterprise Admin Console Claude Documentation · in the page third-party/claude-desktop/admin-console …session counts from your users' apps. Anthropic never holds provider credentials such as API keys or your users' tokens. For the full list of what Anthropic stores, see [Where your data goes](#where-…

Deploy Claude Desktop on 3P with Amazon Bedrock Claude Documentation · in the page third-party/claude-desktop/bedrock …ur identity provider; the proxy calls Amazon Bedrock with its own AWS credentials. Requires app version 2.7032.0 or later. | | You already operate an LLM gateway (Anthropic Messages API) | [Gateway pr…

Deploy with a bootstrap server Claude Documentation · in the page third-party/claude-desktop/bootstrap …figuration varies too widely for per-group profiles: per-user gateway credentials, per-team model allowlists, or per-user OpenTelemetry attribution. When one configuration or a few group-scoped profil…

Built-in connectors Claude Documentation · in the page third-party/claude-desktop/built-in-connectors …e data path. * **Sign-in on the device.** Where the server needs user credentials (Microsoft 365 and GitHub), the user signs in from the app, and tokens are stored encrypted on the device. **Disconnec…

Code in Claude Desktop on 3P Claude Documentation · in the page third-party/claude-desktop/code …renceCredentialHelper*`) | Selects the inference backend and supplies credentials. Code sessions use the same provider and endpoint as Cowork sessions, and the same credentials unless [your organizati…

Configuration changelog Claude Documentation · in the page third-party/claude-desktop/configuration-changelog …*Breaking:** Managed-config URL settings now reject values that embed credentials (`https://user:password@host…`). Configurations that relied on this fail to load until the credentials are removed; us…

Connect to Box Claude Documentation · in the page third-party/claude-desktop/connectors-box …ate the client in Box** In the Box Admin Console, create integration credentials for the Box MCP server as described in Box's [remote MCP server guide](https://developer.box.com/guides/box-mcp/remote…

Connect to GitHub Claude Documentation · in the page third-party/claude-desktop/connectors-github …_PAT"}`, and follows the execution model described under [short-lived credentials with a headers helper](https://claude.com/docs/third-party/claude-desktop/extensions.md#short-lived-credentials-with-a…

Connect to Google Cloud Claude Documentation · in the page third-party/claude-desktop/connectors-google-cloud …sting, or Google blocks their sign-in. Then open **APIs & Services → Credentials**, choose **Create credentials → OAuth client ID**, and select **Desktop app** as the application type. When Google sh…

Write a credential helper Claude Documentation · in the page third-party/claude-desktop/credential-helper …per-related keys. > [!NOTE] > > `inferenceCredentialHelper` supplies credentials for the inference connection only. An MCP server deployed through [`managedMcpServers`](https://claude.com/docs/third-…

User identity and local data Claude Documentation · in the page third-party/claude-desktop/data-storage …3P identifies users and where it stores conversations, settings, and credentials on disk Claude Desktop on third-party (3P) keeps conversations, settings, and credentials on the device. For [SSH rem…

MCP, plugins, skills, and hooks Claude Documentation · in the page third-party/claude-desktop/extensions …tool list, or the error returned. Use it to validate reachability and credentials before exporting the configuration. Give each remote server's final address in `url`. Claude Desktop doesn't follow H…

Deploy Claude Desktop on 3P with Microsoft Foundry Claude Documentation · in the page third-party/claude-desktop/foundry …set **Inference provider** to **Foundry**, then fill in the **Foundry credentials** card with the values for whichever authentication approach you chose: | Field | API key | In-app Entra ID sign-in |…

Deploy Claude Desktop on 3P with an LLM gateway Claude Documentation · in the page third-party/claude-desktop/gateway …der, set `inferenceProvider` to `gateway` and supply the base URL and credentials described below. The gateway must implement the Anthropic [Messages API](https://docs.claude.com/en/api/messages): *…

Installation and setup Claude Documentation · in the page third-party/claude-desktop/installation …strap server when your organization doesn't use MDM, or when per-user credentials or frequently changing settings would make per-group profiles unwieldy. The tradeoff is that you operate the endpoint.…

Deploy with MDM Claude Documentation · in the page third-party/claude-desktop/mdm …Cloud's Agent Platform, Bedrock, Bedrock Mantle, or Foundry) and its credentials Model list Optional credential-helper script | | **Capabilities** | Which of Cowork, Code, and Chat are available Allo…

Network proxy Claude Documentation · in the page third-party/claude-desktop/network-proxy …Windows) Cowork's sandboxed shell. SOCKS URLs and URLs with embedded credentials (`user:password@`) are rejected. If you point the key at a local forwarding proxy on the device, give it as `http://1…

Overview Claude Documentation · in the page third-party/claude-desktop/overview …aunch from the configured inference provider. When a provider and its credentials are present, the sign-in screen offers the option to skip Anthropic authentication and start the app using your infere…

SSH remote sessions in Claude Desktop on 3P Claude Documentation · in the page third-party/claude-desktop/ssh-remote-sessions …op on 3P, the sshHostAllowlist key that enables them, which inference credentials work on a remote host, and what to check before turning them on An SSH remote session is a [Code](https://claude.com/…

Telemetry and egress Claude Documentation · in the page third-party/claude-desktop/telemetry …ms, such as a static key, a credential helper, an application default credentials file, [in-app AWS sign-in](https://claude.com/docs/third-party/claude-desktop/bedrock.md#in-app-aws-sign-in), or a [na…

Deploy Claude Desktop on 3P with Google Cloud's Agent Platform Claude Documentation · in the page third-party/claude-desktop/vertex …'s Agent Platform authenticates with Google Cloud Application Default Credentials, which can be supplied several ways. The right one depends on whether your users have Google identities and whether yo…

Web search and web fetch Claude Documentation · in the page third-party/claude-desktop/web-tools …pplies only the target URL; it cannot set headers, a request body, or credentials. The app checks every fetch, including redirect targets, against `coworkEgressAllowedHosts` before it sends the reques…

Authorization Charter Model Context Protocol · in the page community/interest-groups/auth …ch Authorization Requests, structured denials, remediation hints) * **Credentials for non-HTTP transports**: patterns for stdio, WebSocket, and future transports where the HTTP authorization spec does…

Enterprise-Managed Authorization Charter Model Context Protocol · in the page community/interest-groups/enterprise-managed-authorization …or PRs ### Out of Scope * **Other authorization profiles**: Client Credentials, DPoP, Workload Identity Federation, and the core OAuth 2.1 flow belong to the [Authorization IG](https://modelcontext…