14 pages for toolpolicy.

Claude apps gateway configuration Claude Code CLI · in the page claude-apps-gateway-config …li` block from the base. If you set `disabledBuiltinTools` or `builtinToolPolicy` in both the base and a role policy, the gateway keeps the base's restriction: * `disabledBuiltinTools`: the gateway u… Desktop application Claude Code CLI · in the page desktop …"http"`, `"sse"`, or `"stdio"`, connection details, and optionally a `toolPolicy` map to restrict which of that server's tools users can invoke. Deliver it through the managed settings file, MDM, or a… Changelog Claude Documentation · in the page cowork/changelog …ttings. * Fixed a `Bash` entry in `disabledBuiltinTools` or `builtinToolPolicy` not applying to PowerShell commands on Windows PCs without Git for Windows; a `Bash(**)` entry is now treated as `Bash… Built-in connectors Claude Documentation · in the page third-party/claude-desktop/built-in-connectors …e entry. * **Tool approvals.** Each entry accepts the same per-tool [`toolPolicy`](/docs/third-party/claude-desktop/configuration#managedmcpservers) as any managed server. Without a policy, built-in w… Chat in Claude Desktop on 3P Claude Documentation · in the page third-party/claude-desktop/chat …le in Chat with the same approval model as Cowork sessions: a tool's `toolPolicy` of `"allow"` pre-approves it, `"blocked"` blocks it, and `"ask"` requires user approval on every call. A tool with no… Code in Claude Desktop on 3P Claude Documentation · in the page third-party/claude-desktop/code …| | `builtinToolPolicy`… Configuration reference Claude Documentation · in the page third-party/claude-desktop/configuration …| | <span id="builtintoolpolicy" />Built-in tool policy<br />`builtinToolPolicy` | `object` |… Configuration changelog Claude Documentation · in the page third-party/claude-desktop/configuration-changelog …entry accepts a new `transport` value, `policy-only`: the entry sets `toolPolicy` for an MCP server that an installed plugin provides, matched by `name`, without the app connecting to or launching any… Connect to GitHub Claude Documentation · in the page third-party/claude-desktop/connectors-github …| | Tool surface controls | Per-tool [`toolPolicy`](/docs/third-party/claude-desktop/configuration#managedmcpservers) | `toolsets`, `readOnly`, and per-tool [`toolPolicy… Connect to Microsoft 365 Claude Documentation · in the page third-party/claude-desktop/connectors-m365 …| | `toolPolicy` | No | Per-tool approval locks, the same as for any managed server. See [`toolPolicy`](/docs/thi… User identity and local data Claude Documentation · in the page third-party/claude-desktop/data-storage …ress configuration allows, in connector tool calls permitted by your `toolPolicy` configuration and the user's approvals, and, if you have enabled [content capture](/docs/third-party/claude-desktop/te… MCP, plugins, skills, and hooks Claude Documentation · in the page third-party/claude-desktop/extensions …http", "url": "https://mcp.example.corp", "oauth": true, "toolPolicy": { "search": "allow", "delete_document": "blocked" } }, { "name": "ticketing", "transport": "http", "u… SSH remote sessions in Claude Desktop on 3P Claude Documentation · in the page third-party/claude-desktop/ssh-remote-sessions …eps those headers for its lifetime. * `disabledBuiltinTools`, `builtinToolPolicy`, `autoModeEnabled`, and `disableBypassPermissionsMode`. * [`allowedWorkspaceFolders`](/docs/third-party/claude-desktop… Web search and web fetch Claude Documentation · in the page third-party/claude-desktop/web-tools …tavily", "headersHelper": "/opt/org/bin/tavily-headers", "toolPolicy": { "web_search": "allow" } } ] } ``` <Note> A hosted-vendor key configured in `headers` or returned by `heade…