{"name":"builtinToolPolicy","slug":"builtintoolpolicy","family":"setting","title":"Settings keys","noun":"settings key","description":"Catch-all gateway policies merge desktop overlays key by key, so a strict base can't be loosened accidentally.","description_source":"entry","described_by":{"version":"2.1.232","anchor":"catch-all-and-role-desktop-overlays-merge-by-meaning"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":{"version":"2.1.260","released_at":"2026-09-03 22:32:02","spans":3}},"aliases":[],"entries":[{"version":"2.1.300","anchor":"gateway-inference-settings-are-now-read-by-claude-code-cod","heading":"Admin-managed gateway and provider settings now apply to Claude Code too","line":"Several admin-managed inference, gateway and telemetry settings, until now read only by Desktop, are now marked as read by Claude Code","released_at":"2026-10-14 14:27:26","reason":"found in this entry's text"},{"version":"2.1.293","anchor":"schema-docs-bare-bash-policy-key-also-governs-powershell-e","heading":"Bash policy also covers PowerShell, and an empty allowed-folders list blocks every folder","line":"A bare `Bash` key in `builtinToolPolicy` also governs PowerShell, and an empty `allowedWorkspaceFolders` list now allows no folder at all","released_at":"2026-10-07 17:18:04","reason":"found in this entry's text"},{"version":"2.1.281","anchor":"managed-setting-builtintoolpolicy-ask-session-value-now-d","heading":"Managed setting builtinToolPolicy: \"ask-session\" value now declares a minimum app version","line":"The \"ask-session\" value of the builtinToolPolicy managed setting now declares it is available from app version 1.40609.0","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text, named in this entry"},{"version":"2.1.260","anchor":"ask-session-tool-policy-value-deprecated-for-built-in-tool","heading":"\"ask-session\" tool policy value deprecated for built-in tools","line":"The 'ask-session' tool policy value is deprecated and now just rewritten to 'ask'.","released_at":"2026-09-03 22:32:02","reason":"found in this entry's text, named in this entry"},{"version":"2.1.260","anchor":"argument-scoped-permission-rules-for-built-in-tool-controls","heading":"Argument-scoped permission rules for built-in tool controls","line":"Permission rules can now target specific arguments like Bash(curl *) instead of whole tools.","released_at":"2026-09-03 22:32:02","reason":"found in this entry's text, named in this entry"},{"version":"2.1.260","anchor":"built-in-web-search-can-now-be-disabled-or-gated-via-policy","heading":"Built-in web search can now be disabled or gated via policy without host list","line":"WebSearch can now be disabled or gated entirely without needing a host list.","released_at":"2026-09-03 22:32:02","reason":"found in this entry's text, named in this entry"},{"version":"2.1.232","anchor":"catch-all-and-role-desktop-overlays-merge-by-meaning","heading":"Catch-all and role desktop overlays merge by meaning","line":"Catch-all gateway policies merge desktop overlays key by key, so a strict base can't be loosened accidentally.","released_at":"2026-08-13 21:30:53","reason":"found in this entry's text"}],"entries_total":7,"docs":[{"source":"claude-code","path":"claude-apps-gateway-config","title":"Claude apps gateway configuration","documented":false},{"source":"claude-docs","path":"cowork\/changelog","title":"Changelog","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/chat","title":"Chat in Claude Desktop on 3P","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/code","title":"Code in Claude Desktop on 3P","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/configuration","title":"Configuration reference","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/configuration-changelog","title":"Configuration changelog","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/ssh-remote-sessions","title":"SSH remote sessions in Claude Desktop on 3P","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/web-tools","title":"Web search and web fetch","documented":false}],"docs_total":8,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/builtintoolpolicy","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}