builtin
A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Marketplace validation errors now name the bad source and tell you how to fix it.
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.239.
In the changelogs
18Releases whose published page names builtin.
-
v2.1.302
Organization policy plugin options are filtered by a different check
Claude Code changed how it decides which plugin option values from organization policy are kept, and sets none when no values pass
found in this entry's text
-
v2.1.293
Desktop app admin settings gain SSH, home layout and update-cap options
Admin settings for the Claude Desktop app gain sshTransport, desktopHome and dangerousMaxVersion
found in this entry's text
-
v2.1.287
Built-in security default plugin has a shorter description
The description of the built-in
cc-plugin-sec-default@builtinplugin no longer mentions wherever hooks modules can loadfound in this entry's text
-
v2.1.286
Built-in security plugin keeps deny rules in force over other plugins
A built-in plugin restores deny rules that other plugins lift, and can refuse plugins that did not come from your organization
found in this entry's text
-
v2.1.285
Bundled security plugin renamed to cc-plugin-sec-default@builtin
The bundled security plugin is now
cc-plugin-sec-default@builtin, and writingenabledPluginsreplaces other spellings of the same pluginfound in this entry's text
-
v2.1.284
Built-in plugins in
enabledPluginsare matched regardless of letter caseAn
enabledPluginsentry for a built-in plugin now takes effect even if its name differs from the plugin's only in upper or lower casefound in this entry's text
-
v2.1.277
Env-var-prefix stripping in shell-command normalization now conditional
Shell-command normalization can now skip stripping VAR=value prefixes when matching permission rules
found in this entry's text
-
v2.1.277
Command/skill schema gets a builtin marker to resolve name collisions
Commands and skills now carry a builtin flag to resolve naming clashes with plugin or MCP commands
named in this entry, found in this entry's text
-
v2.1.275
New helper classifies plugin load source for telemetry/errors
A new helper classifies where a plugin was loaded from, for telemetry and error messages
found in this entry's text
-
v2.1.274
Plugin agents can now load from a hooks-module 'files' map, not just a folder
Plugin agents can now load hooks from a files map, not just a folder
found in this entry's text
-
v2.1.268
Plugin enable/disable results now carry a machine-readable failureCode
Plugin enable/disable failures now return a machine-readable failureCode alongside the human-readable error message
found in this entry's text
-
v2.1.268
Security-default hooks module opt-out changed from a boolean to a prependPlugins allowlist
Org opt-out for the built-in security-default hooks now uses a prependPlugins allowlist instead of a simple on/off setting
found in this entry's text
-
v2.1.268
Org-required plugins can no longer be disabled/uninstalled, with new structured failure codes
Plugins your organization requires can no longer be disabled or uninstalled, and failures now report a specific reason code
found in this entry's text
-
v2.1.267
Plugin hook modules gain a resolved 'tier' controlling next.to() ordering
Plugin hooks can now be assigned a resolved ordering tier that next.to() calls are validated against
found in this entry's text
-
v2.1.260
Managed MCP server config gets a formal deprecation/migration system
Legacy managed MCP server config fields now have a formal deprecation and rewrite system.
found in this entry's text
-
v2.1.239
Clearer marketplace validation errors
Marketplace validation errors now name the bad source and tell you how to fix it.
found in this entry's text
-
v2.1.84
Plugin Source Tracking
found in this entry's text
-
v2.1.64
Built-in Plugins
found in this entry's text
First cited
0No release's published evidence quotes this name. The ledger indexes the Evidence lines of every changelog on this site, so this says nobody here has ever quoted it; it says nothing about how old the name is.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.