allowManagedPermissionRulesOnly
A Claude Code settings key, read out of the shipped bundle. It was in the build from v2.1.138 and was gone by v2.1.284.
Make managed settings the only settings source of permission rules
Anthropic's own wording. Read off All settings, captured 2026-10-23.
In the changelogs
11Releases whose published page names allowManagedPermissionRulesOnly.
-
v2.1.309
Three hook settings join Claude Code's managed-settings list
disableAllHooks, allowedHttpHookUrls and httpHookAllowedEnvVars now sit on the same settings list as allowManagedHooksOnly
named in this entry, found in this entry's text
-
v2.1.305
allowManagedPermissionRulesOnlynow affects a plugin trust checkWhen managed settings set allowManagedPermissionRulesOnly, one check on whether a plugin source is trusted now fails
found in this entry's text, named in this entry
-
v2.1.305
allowManagedPermissionRulesOnlyhelp narrows when--plugin-dirplugins keep their toolsThe setting's description now says plugins loaded with
--plugin-dirkeep their allowed tools only in Claude Desktop, and only if your organization didn't set itfound in this entry's text, named in this entry
-
v2.1.284
Managed-rules lockdown keeps plugin tool permissions only from admin-backed sources
Under
allowManagedPermissionRulesOnly, only plugins from admin-backed sources keep their allowed-tools grants; other plugins' grants are ignoredfound in this entry's text, named in this entry
-
v2.1.284
Managed-only permission policy now considers where a plugin came from
Under
allowManagedPermissionRulesOnly, plugin skills can keep their allowed tools based on official attestation or marketplace sourcefound in this entry's text, named in this entry
-
v2.1.284
Admin-only permission rules require npm plugin marketplaces to pin a registry
With
allowManagedPermissionRulesOnlyset, npm-based marketplaces keep their plugins' allowed-tools only when a registry is pinnedfound in this entry's text, named in this entry
-
v2.1.282
Managed-only permission rules now also cover skills'
allowed-toolslistsWith
allowManagedPermissionRulesOnlyon, user and project skills and commands can no longer grant themselves tools throughallowed-toolsfound in this entry's text, named in this entry
-
v2.1.282
/statusexplains when only managed permission rules applyWhen an organisation limits permission rules to managed settings,
/statusnow shows a row listing any allowed tools that were ignoredfound in this entry's text, named in this entry
-
v2.1.282
Skill tool grants from untrusted sources are no longer offered to workers under managed-only rules
With
allowManagedPermissionRulesOnlyset, skills from untrusted sources no longer tell worker agents they grant extra tool permissionsfound in this entry's text
-
v2.1.282
Skills and plugin commands can no longer grant themselves tools under managed-only permission rules
When policy restricts permission rules to managed settings, tool grants written into skills and plugin commands are ignored
found in this entry's text
-
v2.1.257
allowManagedPermissionRulesOnly semantics clarified/expanded
The allowManagedPermissionRulesOnly description now spells out exactly which rule sources it ignores and which still apply.
found in this entry's text, named in this entry
First cited
6The earliest release whose published evidence quoted allowManagedPermissionRulesOnly was v2.1.282, 24 Sep 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
2Build by build
150One row per release since the first build this name was read out of. Absent means the build was read and the name was not in it, never mined means no bundle for that release was ever archived, and a declared type or a default is only ever what that release's own bundle stated.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.