{"name":"disableCommandPluginSources","slug":"disablecommandpluginsources","family":"setting","title":"Settings keys","noun":"settings key","description":"Block [plugins](\/docs\/en\/plugins\/overview) that install by running a marketplace-declared command","description_source":"docs","described_by":{"doc":"claude-code\/settings-reference","title":"All settings"},"presence":{"first_seen":"2.1.229","removed_in":"2.1.284","in_current_build":false,"newest_mined":"2.1.308","builds":45,"mined_builds":149,"first_cited":{"version":"2.1.229","released_at":"2026-08-12 19:28:48","spans":2}},"aliases":[],"entries":[{"version":"2.1.300","anchor":"plugin-command-and-headershelper-sources-held-until-the-orga","heading":"Plugin commands wait until your organization's settings are read","line":"Plugin command sources and marketplace `headersHelper` commands no longer run in a tool server and wait until organization settings have loaded","released_at":"2026-10-14 14:27:26","reason":"found in this entry's text"},{"version":"2.1.300","anchor":"cowork-cloud-holds-on-managed-policy-settings","heading":"Cowork cloud keeps strict managed policy settings once they are set","line":"In Cowork cloud, once certain managed policy settings are tightened, a later settings update can no longer loosen them","released_at":"2026-10-14 14:27:26","reason":"found in this entry's text"},{"version":"2.1.288","anchor":"plugin-hooks-re-read-plugins-when-plugin-affecting-settings","heading":"Plugins are read again if their settings change while hooks are being set up","line":"If settings that affect plugins change while Claude Code is loading them, it now reads the plugins again before choosing which hooks to run","released_at":"2026-10-02 18:30:40","reason":"found in this entry's text, named in this entry"},{"version":"2.1.238","anchor":"managed-settings-can-refuse-plugin-sources-and-marketplace-u","heading":"Managed settings can refuse plugin sources and marketplace updates","line":"Admins can block plugins and marketplaces from unlisted sources, with refusals naming the policy.","released_at":"2026-08-20 18:01:54","reason":"named in this entry, found in this entry's text"},{"version":"2.1.238","anchor":"plugin-marketplaces-and-archives-can-mint-http-headers-from-","heading":"Plugin marketplaces and archives can mint HTTP headers from a command","line":"Marketplaces and plugins can run a command to mint short-lived HTTP headers for fetching archives.","released_at":"2026-08-20 18:01:54","reason":"named in this entry, found in this entry's text"},{"version":"2.1.229","anchor":"managed-setting-to-block-command-sourced-plugins","heading":"Managed setting to block command-sourced plugins","line":"A managed key blocks command-sourced plugins, falling back to your existing hook restriction.","released_at":"2026-08-12 19:28:48","reason":"named in this entry, found in this entry's text"},{"version":"2.1.229","anchor":"marketplaces-can-ship-a-plugin-built-by-running-a-local-comm","heading":"Marketplaces can ship a plugin built by running a local command","line":"Marketplace plugins can be built by a local command, with a timeout and optional link mode.","released_at":"2026-08-12 19:28:48","reason":"named in this entry, found in this entry's text"},{"version":"2.1.229","anchor":"plugins-can-be-installed-from-a-command-that-produces-the-pl","heading":"Plugins can be installed from a command that produces the plugin directory","line":"Marketplaces can declare command plugin sources, and admins can block them with one setting.","released_at":"2026-08-12 19:28:48","reason":"named in this entry, found in this entry's text"}],"entries_total":8,"docs":[{"source":"claude-code","path":"settings-reference","title":"All settings","documented":true},{"source":"claude-code","path":"settings","title":"Claude Code settings","documented":true},{"source":"claude-code","path":"admin-setup","title":"Set up Claude Code for your organization","documented":false},{"source":"claude-code","path":"hooks","title":"Hooks reference","documented":false},{"source":"claude-code","path":"managed-settings","title":"Deploy managed settings","documented":false},{"source":"claude-code","path":"plugins\/host-marketplace","title":"Host and maintain a marketplace","documented":false},{"source":"claude-code","path":"plugins\/marketplace-reference","title":"Marketplace reference","documented":false},{"source":"claude-code","path":"plugins\/org","title":"Manage Claude Code plugins for your organization","documented":false},{"source":"claude-code","path":"plugins\/troubleshooting","title":"Troubleshoot plugins","documented":false}],"docs_total":9,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/disablecommandpluginsources","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}