390 pages for permissions.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
Add a connector that isn't in the directory
Claude Documentation · in the page
connectors/custom/add-unlisted
…# Desktop extensions A desktop extension runs locally with your user permissions: * It can access only what you can access * It transmits no data unless the extension is explicitly designed to * Ent…
Get started with connectors
Claude Documentation · in the page
connectors/getting-started
…ol from now on. You can change this later under the connector's [tool permissions](#manage-or-disconnect-a-connector). To stop Claude from using a connector in a conversation, turn its toggle off in…
Google Calendar
Claude Documentation · in the page
connectors/google/calendar
…n to Google** Sign in to your Google account and grant the requested permissions. When the connection succeeds, the **Connect** button on the Google Calendar connector changes to **Disconnect**. On…
Google Drive
Claude Documentation · in the page
connectors/google/drive
…n to Google** Sign in to your Google account and grant the requested permissions. When the connection succeeds, the **Connect** button on the Google Drive connector changes to **Disconnect**. On Te…
Gmail
Claude Documentation · in the page
connectors/google/gmail
…n to Google** Sign in to your Google account and grant the requested permissions. When the connection succeeds, the **Connect** button on the Gmail connector changes to **Disconnect**. On Team and…
MCP tunnels
Claude Documentation · in the page
connectors/mcp-tunnels/overview
…h with your organization's secrets-management controls, restrict file permissions, and rotate them on a schedule and immediately after any suspected exposure. See [Rotate credentials](/docs/connectors…
Microsoft 365 connector
Claude Documentation · in the page
connectors/microsoft/365
…t consent** Connect your own account and grant the organization-wide permissions. **4. Adjust access if needed** Restrict which users can use the connector, or revoke specific permission scopes. F…
Changelog
Claude Documentation · in the page
cowork/changelog
…uter, each SSH host, and each WSL distribution. Folders set to Bypass permissions start in their default mode until you pick it again and confirm; on SSH and WSL, earlier picks more permissive than th…
Set up Cowork (local mode) for a HIPAA-ready organization
Claude Documentation · in the page
cowork/hipaa-setup
…n the [Claude Desktop policy](#deploy-the-claude-desktop-policy) | | `permissions.deny` | A rule that denies `Bash` with no pattern also stops Claude from running shell commands in Cowork | | `allowMa…
Claude for Government changelog
Claude Documentation · in the page
government/changelog
…before each command Claude runs in its Terminal panel, even in bypass-permissions or Auto mode, while **Blocked shell commands** lists any command. * Improved directory sync (SCIM) so that one tenant'…
Available settings
Claude Documentation · in the page
government/config/settings
…he open file without asking. Turning it off also turns off **Skip all permissions**. | On | Claude for Microsoft 365 | | **File access rules (Microsoft 365)** | Rules that block Claude on files with c…
Set up the Microsoft 365 connector
Claude Documentation · in the page
government/connectors/microsoft-365
…member can already open in Microsoft 365. Your existing Microsoft 365 permissions, sharing rules, and Conditional Access policies apply unchanged. Setup has two parts. First, someone with administrat…
Connectors
Claude Documentation · in the page
government/connectors/overview
…administrator registers an application, approves its Microsoft Graph permissions, and sends you two values, the tenant ID and the client ID. > > On Config, under Integrations, expand Microsoft 365. P…
Connect Claude Desktop to Claude for Government
Claude Documentation · in the page
government/deploy-desktop/configure
…ust be owned by root and must not be group- or world-writable. If the permissions are wrong, the app rejects the file, logs the reason to `main.log`, and treats the device as managed but unreadable, s…
Security and data handling
Claude Documentation · in the page
government/security/security-and-data-handling
…*Allowed** on the [Config](/docs/government/config/settings.md#bypass-permissions-mode-and-auto-mode) page, Claude Desktop offers it in Cowork and in Code sessions, and members can switch the Claude C…
Video walkthroughs for administrators
Claude Documentation · in the page
government/video-walkthroughs
…administrator registers an application, approves its Microsoft Graph permissions, and sends you two values, the tenant ID and the client ID. > > On Config, under Integrations, expand Microsoft 365. P…
Use Claude for Outlook
Claude Documentation · in the page
office-agents/outlook
…pivot.claude.ai/auth/callback ``` The administrator sees a Microsoft permissions screen listing `Mail.ReadWrite`, `Calendars.Read`, `User.Read`, and `offline_access`. After they select Accept, all us…
Use Claude for M365 with third-party platforms
Claude Documentation · in the page
office-agents/third-party-platforms
…ith `bedrock:InvokeModel` and `bedrock:InvokeModelWithResponseStream` permissions, trust policy scoped to the Claude add-in's application ID. | | Vertex AI direct | Walks through creating a Google OAu…
Use Claude for Word
Claude Documentation · in the page
office-agents/word
…atch your firm's playbook and standard positions. * Use appropriate permissions and access controls. * Maintain human oversight for client-facing work. ## Example use cases ### Legal contract revi…
Deploy with Enterprise Admin Console
Claude Documentation · in the page
third-party/claude-desktop/admin-console
…-the-built-in-browser-from-the-enterprise-admin-console) and its site permissions, whether users may add their own skills and plugins, and organization instructions | | **Connectors** | Managed MCP se…
Deploy Claude Desktop on 3P with Amazon Bedrock
Claude Documentation · in the page
third-party/claude-desktop/bedrock
…ame permission set. To give different groups different Amazon Bedrock permissions, deploy distinct configuration profiles with different `inferenceBedrockSsoRoleName` values. * **Mid-session credentia…
Built-in browser and Claude in Chrome
Claude Documentation · in the page
third-party/claude-desktop/browser
…ou allow. Then add sites with the **Add websites** button. These site permissions are the same ones the built-in browser uses for your organization. Claude in Chrome also needs the **Allow user-added…
Code in Claude Desktop on 3P
Claude Documentation · in the page
third-party/claude-desktop/code
…it unless the user has already chosen another mode or a Claude Code `permissions.defaultMode` applies. Set it to `false` to remove Auto mode from Code and Cowork. Set it to `true` to also offer **Aut…
Configuration reference
Claude Documentation · in the page
third-party/claude-desktop/configuration
…to mode | Capabilities | Self-hosted Admin Console | | [`disableBypassPermissionsMode`](#disablebypasspermissionsmode) | Disable bypass permissions mode | Capabilities | Admin Console | | [`disableBun…
Configuration changelog
Claude Documentation · in the page
third-party/claude-desktop/configuration-changelog
…a project's `.mcp.json` declares out of Code sessions. Keep the same permissions in `orgPluginSettings` while earlier releases are in use, and do not deploy a list made only of `policy-only` entries…
Connect to GitHub
Claude Documentation · in the page
third-party/claude-desktop/connectors-github
…ks in place of an OAuth app: put its client ID in the same field. Its permissions come from the app registration itself (the entry's `scope` field is ignored), it must be installed where users need ac…
Connect to Microsoft 365
Claude Documentation · in the page
third-party/claude-desktop/connectors-m365
…e85f37c17 ``` The consent screen lists the delegated Microsoft Graph permissions the connector requests. The read permissions include: | Scope | Purpose | | - | - | | `User.Read` | Read the signed-i…
User identity and local data
Claude Documentation · in the page
third-party/claude-desktop/data-storage
…preferences). | Files in this directory are written with owner-only permissions so other OS accounts on the same machine cannot read them. The app encrypts stored sign-in tokens and similar secrets…
Sign in through the OS identity broker
Claude Documentation · in the page
third-party/claude-desktop/entra-broker
…t the feature signs in against. These are in addition to whatever API permissions the feature itself needs. Under **Authentication**, set **Allow public client flows** to **Yes**. The control is on t…
MCP, plugins, skills, and hooks
Claude Documentation · in the page
third-party/claude-desktop/extensions
…licy`. A `policy-only` entry connects to nothing. It only applies the permissions, and it takes precedence over `orgPluginSettings` for that server. A regular `managedMcpServers` entry that matches a…
Deploy Claude Desktop on 3P with Microsoft Foundry
Claude Documentation · in the page
third-party/claude-desktop/foundry
…gistrations → New registration**. On the registration: * Under **API permissions**, select **Add a permission**, find **Azure Cognitive Services** in the API picker, and add the **Delegated** permiss…
Deploy Claude Desktop on 3P with an LLM gateway
Claude Documentation · in the page
third-party/claude-desktop/gateway
…t sign-in time. You do not need a client secret or any additional API permissions. **2. Configure your gateway to validate the token** Tell your gateway to accept the bearer token only if it was iss…
Migrate Claude Desktop from a cloud provider to Claude Enterprise
Claude Documentation · in the page
third-party/claude-desktop/move-to-claude-enterprise
…ugin security scanning**. For custom roles, also give them the skills permissions in [**Organization settings > Roles**](https://claude.ai/admin-settings/roles). Skills need both settings. Plugins and…
SSH remote sessions in Claude Desktop on 3P
Claude Documentation · in the page
third-party/claude-desktop/ssh-remote-sessions
…ltinTools`, `builtinToolPolicy`, `autoModeEnabled`, and `disableBypassPermissionsMode`. * [`allowedWorkspaceFolders`](/docs/third-party/claude-desktop/configuration#allowedworkspacefolders), evaluated…
Web search and web fetch
Claude Documentation · in the page
third-party/claude-desktop/web-tools
…Auto mode, which new Code sessions start in by default, and in bypass permissions mode, Claude Code doesn't ask the user before that fetch. For the other modes, see [WebFetch tool behavior](https://co…
Infrastructure Charter
Model Context Protocol · in the page
community/working-groups/infrastructure
…* **Access and accounts:** Organization invitations, team membership, permissions, and account provisioning. This includes letting authorized leads of MCP working groups invite contributors to the org…
Build an MCP client
Model Context Protocol · in the page
docs/2024-11-05/develop/build-client
…y in `.env` * Validate server responses * Be cautious with tool permissions ## Troubleshooting ### Server Path Issues * Double-check the path to your server script is correct * Use the absolu…
Client Best Practices
Model Context Protocol · in the page
docs/2024-11-05/develop/clients/client-best-practices
…solated-vm` | Rust / Node / CLI | V8-based runtimes with fine-grained permissions. Can disable all permissions for full lockdown. | | **Python** | [Monty](https://github.com/pydantic/monty) *(experime…
Connect to local MCP servers
Model Context Protocol · in the page
docs/2024-11-05/develop/connect-local-servers
…Claude reading and modifying. The server runs with your user account permissions, so it can perform any file operations you can perform manually. **4. Restart Claude Desktop** After saving the conf…
Connect to remote MCP Servers
Model Context Protocol · in the page
docs/2024-11-05/develop/connect-remote-servers
…0mCNH\&q=85\&s=68722669d9e18252756885c703e4f221) **5. Configure Tool Permissions** Remote MCP servers often expose multiple tools with varying capabilities. You can control which tools Claude is all…
Architecture overview
Model Context Protocol · in the page
docs/2024-11-05/learn/architecture
…may come and go based on server state, external dependencies, or user permissions 2. **Efficiency**: Clients don't need to poll for changes; they're notified when updates occur 3. **Consistency**: Ens…
Understanding MCP clients
Model Context Protocol · in the page
docs/2024-11-05/learn/client-concepts
…c workflow. This approach puts the client in complete control of user permissions and security measures. | A server for booking travel may send a list of flights to an LLM and request that the LLM pic…
Debugging
Model Context Protocol · in the page
docs/2024-11-05/tools/debugging
…als * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor access patterns For a full treatment of MCP attack vectors and mitigations, se…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/2024-11-05/tutorials/security/authorization
…authorize` endpoint, where the user can log in and grant the required permissions. The authorization server will then redirect back to the client with an authorization code that the client exchanges f…
Security Best Practices
Model Context Protocol · in the page
docs/2024-11-05/tutorials/security/security_best_practices
…xt when possible * Use principle of least privilege for proxy process permissions * Implement process-level sandboxing for the proxy service itself * Consider running the proxy in a container or restr…
Build an MCP client
Model Context Protocol · in the page
docs/2025-03-26/develop/build-client
…y in `.env` * Validate server responses * Be cautious with tool permissions ## Troubleshooting ### Server Path Issues * Double-check the path to your server script is correct * Use the absolu…
Client Best Practices
Model Context Protocol · in the page
docs/2025-03-26/develop/clients/client-best-practices
…solated-vm` | Rust / Node / CLI | V8-based runtimes with fine-grained permissions. Can disable all permissions for full lockdown. | | **Python** | [Monty](https://github.com/pydantic/monty) *(experime…
Connect to local MCP servers
Model Context Protocol · in the page
docs/2025-03-26/develop/connect-local-servers
…Claude reading and modifying. The server runs with your user account permissions, so it can perform any file operations you can perform manually. **4. Restart Claude Desktop** After saving the conf…
Connect to remote MCP Servers
Model Context Protocol · in the page
docs/2025-03-26/develop/connect-remote-servers
…0mCNH\&q=85\&s=68722669d9e18252756885c703e4f221) **5. Configure Tool Permissions** Remote MCP servers often expose multiple tools with varying capabilities. You can control which tools Claude is all…
Architecture overview
Model Context Protocol · in the page
docs/2025-03-26/learn/architecture
…may come and go based on server state, external dependencies, or user permissions 2. **Efficiency**: Clients don't need to poll for changes; they're notified when updates occur 3. **Consistency**: Ens…