Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial
Home / Reference / Settings keys

builtinToolPolicy

setting never mined JSON

A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.

Catch-all gateway policies merge desktop overlays key by key, so a strict base can't be loosened accidentally.

Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.232.

First seen — never in a mined build
Last seen — never in a mined build
Builds0 / 149on this box, as of v2.1.308
Written about v2.1.232 first named in a changelog, 13 Aug 2026

In the changelogs

7

Releases whose published page names builtinToolPolicy.

  1. v2.1.300
    Admin-managed gateway and provider settings now apply to Claude Code too

    Several admin-managed inference, gateway and telemetry settings, until now read only by Desktop, are now marked as read by Claude Code

    found in this entry's text

  2. v2.1.293
    Bash policy also covers PowerShell, and an empty allowed-folders list blocks every folder

    A bare Bash key in builtinToolPolicy also governs PowerShell, and an empty allowedWorkspaceFolders list now allows no folder at all

    found in this entry's text

  3. v2.1.281
    Managed setting builtinToolPolicy: "ask-session" value now declares a minimum app version

    The "ask-session" value of the builtinToolPolicy managed setting now declares it is available from app version 1.40609.0

    found in this entry's text, named in this entry

  4. v2.1.260
    "ask-session" tool policy value deprecated for built-in tools

    The 'ask-session' tool policy value is deprecated and now just rewritten to 'ask'.

    found in this entry's text, named in this entry

  5. v2.1.260
    Argument-scoped permission rules for built-in tool controls

    Permission rules can now target specific arguments like Bash(curl *) instead of whole tools.

    found in this entry's text, named in this entry

  6. v2.1.260
    Built-in web search can now be disabled or gated via policy without host list

    WebSearch can now be disabled or gated entirely without needing a host list.

    found in this entry's text, named in this entry

  7. v2.1.232
    Catch-all and role desktop overlays merge by meaning

    Catch-all gateway policies merge desktop overlays key by key, so a strict base can't be loosened accidentally.

    found in this entry's text

First cited

3

The earliest release whose published evidence quoted builtinToolPolicy was v2.1.260, 3 Sep 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.

ReleaseDateThe span that was quoted
v2.1.2603 Sep 2026builtinToolPolicy: "ask-session"
v2.1.2603 Sep 2026list the bare `WebSearch` name in `disabledBuiltinTools` or `builtinToolPolicy`; it takes no per-host scope
v2.1.30014 Oct 2026flatKey: "builtinToolPolicy"

Presence across releases

0

The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.

Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.

Feedback