Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial

--plugin-dir

cli in the build documented JSON

A Claude Code CLI flag, read out of the shipped bundle. It has been in the build since v2.1.138, including the newest one read.

Load a plugin from a directory or .zip archive, or several from a folder of plugins, for this session only. Each flag takes one path. Repeat the flag for more paths: --plugin-dir A --plugin-dir B.zip. Passing a folder of plugins requires Claude Code v2.1.265 or later

Anthropic's own wording. Read off CLI reference, captured 2026-09-26.

First seen v2.1.138 9 May 2026
Last seen v2.1.308 22 Oct 2026
Builds149 / 149on this box, as of v2.1.308
Written about v2.0.25 first named in a changelog, 21 Oct 2025
v2.1.138in the build not in the build never minedv2.1.308

In the changelogs

34

Releases whose published page names --plugin-dir.

  1. v2.1.305
    allowManagedPermissionRulesOnly help narrows when --plugin-dir plugins keep their tools

    The setting's description now says plugins loaded with --plugin-dir keep their allowed tools only in Claude Desktop, and only if your organization didn't set it

    found in this entry's text, named in this entry

  2. v2.1.301
    Programs driving Claude Code can add plugins during a session

    Programs built on the SDK can now load more plugins into a running session through the plugin reload request, without a restart

    found in this entry's text, named in this entry

  3. v2.1.287
    Plugin names that imitate Anthropic's are now flagged when validated

    Plugin checks now give an error for names that start with claude-, anthropic- or similar, and a warning for looser look-alikes

    found in this entry's text

  4. v2.1.284
    Managed-rules lockdown keeps plugin tool permissions only from admin-backed sources

    Under allowManagedPermissionRulesOnly, only plugins from admin-backed sources keep their allowed-tools grants; other plugins' grants are ignored

    found in this entry's text

  5. v2.1.283
    Validator reports plugin and marketplace names Claude Code cannot install

    Marketplace validation now gives an error for plugin or marketplace names Claude Code cannot install, instead of saying they are accepted

    found in this entry's text

  6. v2.1.283
    SDK startup info now says which plugin directory failed to load

    Plugin load errors that Claude Code reports to SDK programs are now documented and can give the path of the directory that failed

    found in this entry's text, named in this entry

  7. v2.1.281
    --tmux worktree relaunch absolutizes path arguments

    When --tmux relaunches Claude Code for a worktree, relative file paths in flags are now turned into full paths

    found in this entry's text

  8. v2.1.281
    --plugin-dir log explains plugin vs folder-of-plugins

    The --plugin-dir debug log now explains whether a folder was read as one plugin or a folder of plugins

    found in this entry's text, named in this entry

  9. v2.1.281
    --managed-settings is carried through to spawned sessions; --setting-sources is accepted and discarded by one argument parser

    --managed-settings is now passed on to sessions Claude Code starts itself, while one parser reads --setting-sources and throws the value away

    found in this entry's text

  10. v2.1.281
    bg dispatch carries reattachEnv and retries while the daemon starts

    Background dispatch now retries while the daemon starts, carries a reattach environment, and forwards flags like --settings when attaching

    found in this entry's text

  11. v2.1.280
    CLAUDE_CODE_PLUGIN_DIRS env var for sideloading plugin directories

    New CLAUDE_CODE_PLUGIN_DIRS environment variable lets you register extra plugin directories without --plugin-dir flags

    found in this entry's text, named in this entry

  12. v2.1.277
    New disableSideloadFlags settings key hardened against malformed values

    A malformed disableSideloadFlags setting now blocks sideload flags by default instead of being ignored

    found in this entry's text

  13. v2.1.265
    --plugin-dir now accepts a folder containing multiple plugins

    --plugin-dir can now point at a folder holding several plugins at once

    found in this entry's text, named in this entry

  14. v2.1.265
    --plugin-dir help text now documents loading a folder of plugins

    --plugin-dir help text now documents that a folder of plugins can be passed

    found in this entry's text, named in this entry

  15. v2.1.261
    New SDK launch flag: --await-initialize

    A new SDK CLI flag makes the process wait for an initialize request over stdin before starting.

    found in this entry's text, named in this entry

  16. v2.1.261
    SDK plugin delivery via initialize request

    SDK plugins can now be sent via an initialize request instead of the command line, with a fallback warning if not applied.

    found in this entry's text

  17. v2.1.261
    Poll tool's "evals" toolState scaffolding is unreachable in this build

    Some poll-tool eval-tracking scaffolding exists but can't be reached in this build.

    found in this entry's text

  18. v2.1.261
    SDK session init accepts a plugins field over stdin

    The SDK's initialize request can now carry plugin paths over stdin instead of one flag per plugin.

    found in this entry's text

  19. v2.1.261
    initialize control request can now report whether requested plugins loaded

    The initialize request now reports whether plugins you asked for actually loaded.

    found in this entry's text

  20. v2.1.261
    Plugin loading gains 'sync-attributed' directories and managed-hooks-only enforcement

    Plugin resolution now distinguishes sync-attributed plugins and enforces managed hooks-only rules.

    found in this entry's text

  21. v2.1.248
    claude agents respects restricted mode

    The agents view now inherits restricted mode from the session, not just an explicit flag.

    found in this entry's text

  22. v2.1.239
    Command-line flag parsing rewritten around an explicit table of value-taking flags

    Flags that take values no longer swallow or drop their arguments, and -- is handled.

    named in this entry, found in this entry's text

  23. v2.1.239
    Plugin errors now say what to do based on where the plugin came from

    Plugin load errors now give advice matched to how the plugin was installed, including synced copies being shadowed.

    named in this entry, found in this entry's text

  24. v2.1.239
    Plugin sync warns on blocked directories, and load-log wording changed

    Plugin sync now warns when a directory blocks the install path, and footer text comes from the marketplace.

    found in this entry's text

  25. v2.1.239
    Plugin commands explain why a plugin cannot be toggled

    Plugin commands now explain refusals for built-ins and org-locked plugins instead of acting oddly.

    found in this entry's text

  26. v2.1.193
    disableSideloadFlags Enterprise Setting

    found in this entry's text

  27. v2.1.172
    --plugin-dir-no-mcp Flag

    found in this entry's text

  28. v2.1.139

    found in this entry's text

  29. v2.1.129
    Session Plugins from URLs

    found in this entry's text

  30. v2.1.128
    Session-Only Plugin Zip Loading

    found in this entry's text

  31. v2.1.84
    Plugin Source Tracking

    found in this entry's text

  32. v2.1.76
    --plugin-dir Flag Now Repeatable

    found in this entry's text

  33. v2.1.76
    Plugin Dependency Resolution Enhanced

    found in this entry's text

  34. v2.0.25
    Session-Only Plugin Loading

    found in this entry's text

First cited

7

The earliest release whose published evidence quoted --plugin-dir was v2.1.76, 14 Mar 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.

ReleaseDateThe span that was quoted
v2.1.7614 Mar 2026Load plugins from a directory for this session only (repeatable: --plugin-dir A --plugin-dir B)
v2.1.17210 Jun 2026Like --plugin-dir but the engine will not read this plugin's .mcp.json
v2.1.19325 Jun 2026rejects the --plugin-dir, --plugin-url, --agents
v2.1.24827 Aug 2026claude agents --plugin-dir (commander action)
v2.1.2658 Sep 2026a folder of plugins loads each child (repeatable: --plugin-dir A --plugin-dir B.zip)
v2.1.28325 Sep 2026Present only when a --plugin-dir, SDK `plugins` or synced directory entry did not load at all

1 further span in the ledger name it. The list above is the earliest first and stops at 6.

Presence across releases

1
BuildsHow manyDatesReading
v2.1.138 – v2.1.308149 builds9 May 2026 → 22 Oct 2026 ◆in the build

Build by build

149

One row per release since the first build this name was read out of. Absent means the build was read and the name was not in it, never mined means no bundle for that release was ever archived, and a declared type or a default is only ever what that release's own bundle stated.

BuildDateStateThe record behind it
v2.1.1389 May 2026·presentverdict: present
v2.1.13911 May 2026·presentverdict: present
v2.1.14012 May 2026·presentverdict: present
v2.1.141·presentverdict: present
v2.1.142·presentverdict: present
v2.1.143·presentverdict: present
v2.1.144·presentverdict: present
v2.1.145·presentverdict: present
v2.1.146·presentverdict: present
v2.1.147·presentverdict: present
v2.1.148·presentverdict: present
v2.1.149·presentverdict: present
v2.1.150·presentverdict: present
v2.1.152·presentverdict: present
v2.1.153·presentverdict: present
v2.1.154·presentverdict: present
v2.1.156·presentverdict: present
v2.1.157·presentverdict: present
v2.1.158·presentverdict: present
v2.1.159·presentverdict: present
v2.1.160·presentverdict: present
v2.1.161·presentverdict: present
v2.1.162·presentverdict: present
v2.1.1634 Jun 2026·presentverdict: present
v2.1.1655 Jun 2026·presentverdict: present
v2.1.1665 Jun 2026·presentverdict: present
v2.1.1676 Jun 2026·presentverdict: present
v2.1.1686 Jun 2026·presentverdict: present
v2.1.1698 Jun 2026·presentverdict: present
v2.1.1709 Jun 2026·presentverdict: present
v2.1.17210 Jun 2026·presentverdict: present
v2.1.17311 Jun 2026·presentverdict: present
v2.1.17411 Jun 2026·presentverdict: present
v2.1.17512 Jun 2026·presentverdict: present
v2.1.17612 Jun 2026·presentverdict: present
v2.1.17713 Jun 2026·presentverdict: present
v2.1.17815 Jun 2026·presentverdict: present
v2.1.17916 Jun 2026·presentverdict: present
v2.1.18117 Jun 2026·presentverdict: present
v2.1.18218 Jun 2026·presentverdict: present
v2.1.18319 Jun 2026·presentverdict: present
v2.1.18520 Jun 2026·presentverdict: present
v2.1.18622 Jun 2026·presentverdict: present
v2.1.18723 Jun 2026·presentverdict: present
v2.1.19024 Jun 2026·presentverdict: present
v2.1.19124 Jun 2026·presentverdict: present
v2.1.19325 Jun 2026·presentverdict: present
v2.1.19526 Jun 2026·presentverdict: present
v2.1.19629 Jun 2026·presentverdict: present
v2.1.19730 Jun 2026·presentverdict: present
v2.1.1981 Jul 2026·presentverdict: present
v2.1.1992 Jul 2026·presentverdict: present
v2.1.2003 Jul 2026·presentverdict: present
v2.1.2013 Jul 2026·presentverdict: present
v2.1.2026 Jul 2026·presentverdict: present
v2.1.2037 Jul 2026·presentverdict: present
v2.1.2048 Jul 2026·presentverdict: present
v2.1.2058 Jul 2026·presentverdict: present
v2.1.2069 Jul 2026·presentverdict: present
v2.1.20710 Jul 2026·presentverdict: present
v2.1.20813 Jul 2026·presentverdict: present
v2.1.20914 Jul 2026·presentverdict: present
v2.1.21014 Jul 2026·presentverdict: present
v2.1.21115 Jul 2026·presentverdict: present
v2.1.21216 Jul 2026·presentverdict: present
v2.1.21317 Jul 2026·presentverdict: present
v2.1.21418 Jul 2026·presentverdict: present
v2.1.21519 Jul 2026·presentverdict: present
v2.1.21620 Jul 2026·presentverdict: present
v2.1.21721 Jul 2026·presentverdict: present
v2.1.21822 Jul 2026·presentverdict: present
v2.1.21924 Jul 2026·presentverdict: present
v2.1.22024 Jul 2026·presentverdict: present
v2.1.2213 Aug 2026·presentverdict: present
v2.1.2224 Aug 2026·presentverdict: present
v2.1.2235 Aug 2026·presentverdict: present
v2.1.2247 Aug 2026·presentverdict: present
v2.1.2257 Aug 2026·presentverdict: present
v2.1.2268 Aug 2026·presentverdict: present
v2.1.22710 Aug 2026·presentverdict: present
v2.1.22811 Aug 2026·presentverdict: present
v2.1.22912 Aug 2026·presentverdict: present
v2.1.23113 Aug 2026·presentverdict: present
v2.1.23213 Aug 2026·presentverdict: present
v2.1.23314 Aug 2026·presentverdict: present
v2.1.23417 Aug 2026·presentverdict: present
v2.1.23518 Aug 2026·presentverdict: present
v2.1.23619 Aug 2026·presentverdict: present
v2.1.23719 Aug 2026·presentverdict: present
v2.1.23820 Aug 2026·presentverdict: present
v2.1.23921 Aug 2026·presentverdict: present
v2.1.24022 Aug 2026·presentverdict: present
v2.1.24122 Aug 2026·presentverdict: present
v2.1.24224 Aug 2026·presentverdict: present
v2.1.24324 Aug 2026·presentverdict: present
v2.1.24525 Aug 2026·presentverdict: present
v2.1.24625 Aug 2026·presentverdict: present
v2.1.24726 Aug 2026·presentverdict: present
v2.1.24827 Aug 2026·presentverdict: present
v2.1.25027 Aug 2026·presentverdict: present
v2.1.25128 Aug 2026·presentverdict: present
v2.1.25231 Aug 2026·presentverdict: present
v2.1.2571 Sep 2026·presentverdict: present
v2.1.2581 Sep 2026·presentverdict: present
v2.1.2592 Sep 2026·presentverdict: present
v2.1.2603 Sep 2026·presentverdict: present
v2.1.2614 Sep 2026·presentverdict: present
v2.1.2636 Sep 2026·presentverdict: present
v2.1.2658 Sep 2026·presentverdict: present
v2.1.2668 Sep 2026·presentverdict: present
v2.1.2679 Sep 2026·presentverdict: present
v2.1.26810 Sep 2026·presentverdict: present
v2.1.26911 Sep 2026·presentverdict: present
v2.1.27012 Sep 2026·presentverdict: present
v2.1.27114 Sep 2026·presentverdict: present
v2.1.27214 Sep 2026·presentverdict: present
v2.1.27315 Sep 2026·presentverdict: present
v2.1.27416 Sep 2026·presentverdict: present
v2.1.27517 Sep 2026·presentverdict: present
v2.1.27618 Sep 2026·presentverdict: present
v2.1.27718 Sep 2026·presentverdict: present
v2.1.27819 Sep 2026·presentverdict: present
v2.1.28022 Sep 2026·presentverdict: present
v2.1.28123 Sep 2026·presentverdict: present
v2.1.28224 Sep 2026·presentverdict: present
v2.1.28325 Sep 2026·presentverdict: present
v2.1.28428 Sep 2026·presentverdict: present
v2.1.28529 Sep 2026·presentverdict: present
v2.1.28630 Sep 2026·presentverdict: present
v2.1.2871 Oct 2026·presentverdict: present
v2.1.2882 Oct 2026·presentverdict: present
v2.1.2893 Oct 2026·presentverdict: present
v2.1.2905 Oct 2026·presentverdict: present
v2.1.2916 Oct 2026·presentverdict: present
v2.1.2926 Oct 2026·presentverdict: present
v2.1.2937 Oct 2026·presentverdict: present
v2.1.2948 Oct 2026·presentverdict: present
v2.1.2958 Oct 2026·presentverdict: present
v2.1.2969 Oct 2026·presentverdict: present
v2.1.29914 Oct 2026·presentverdict: present
v2.1.30014 Oct 2026·presentverdict: present
v2.1.30115 Oct 2026·presentverdict: present
v2.1.30216 Oct 2026·presentverdict: present
v2.1.30318 Oct 2026·presentverdict: present
v2.1.30419 Oct 2026·presentverdict: present
v2.1.30520 Oct 2026·presentverdict: present
v2.1.30621 Oct 2026·presentverdict: present
v2.1.30721 Oct 2026·presentverdict: present
v2.1.30822 Oct 2026·presentverdict: present

Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the CLI flag does. All CLI flags.

Feedback