--trust-plugin
A Claude Code CLI flag, read out of the shipped bundle. It has been in the build since v2.1.269, including the newest one read.
claude plugin eval adds --trust-plugin for CI and --allow-real-servers to run real MCP servers without mocks
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.269.
In the changelogs
4Releases whose published page names --trust-plugin.
-
v2.1.269
New CLI flags for the plugin-eval command: --trust-plugin and --allow-real-servers
claude plugin evaladds--trust-pluginfor CI and--allow-real-serversto run real MCP servers without mocksfound in this entry's text, named in this entry
-
v2.1.269
claude plugin evalnow requires explicit trust confirmation before runningclaude plugin evalnow checks that a plugin is trusted before it will run its eval suitefound in this entry's text, named in this entry
-
v2.1.269
plugin eval CLI help text expanded with sandboxing/trust disclosure
claude plugin evalhelp text now explains sandboxing limits and the new untrusted-plugin confirmation promptfound in this entry's text
-
v2.1.269
New trust gate before piloting an untrusted plugin directory in
claude plugin eval initclaude plugin eval init now asks whether you trust a plugin directory before piloting its eval cases
found in this entry's text, named in this entry
First cited
2The earliest release whose published evidence quoted --trust-plugin was v2.1.269, 11 Sep 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
1Build by build
47One row per release since the first build this name was read out of. Absent means the build was read and the name was not in it, never mined means no bundle for that release was ever archived, and a declared type or a default is only ever what that release's own bundle stated.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the CLI flag does. All CLI flags.