{"name":"headers","slug":"headers","family":"setting","title":"Settings keys","noun":"settings key","description":"Marketplaces and plugins can run a command to mint short-lived HTTP headers for fetching archives.","description_source":"entry","described_by":{"version":"2.1.238","anchor":"plugin-marketplaces-and-archives-can-mint-http-headers-from-"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.299","anchor":"mcp-configured-headers-on-oauth-discoveryrevocation-reser","heading":"MCP sign-in requests now send your configured headers","line":"Configured MCP headers are now sent when finding OAuth details and revoking tokens, only to the same server","released_at":"2026-10-14 00:23:19","reason":"found in this entry's text, named in this entry"},{"version":"2.1.284","anchor":"plugin-marketplace-sources-embedded-credentials-stripped-s","heading":"Plugin marketplace sources can now have credentials removed and odd URLs refused","line":"Claude Code now has a check that strips usernames, passwords and headers from plugin marketplace sources and refuses suspicious URLs","released_at":"2026-09-28 17:11:59","reason":"found in this entry's text"},{"version":"2.1.277","anchor":"gateway-upstream-providers-can-now-set-custom-headers","heading":"Gateway upstream providers can now set custom headers","line":"Gateway upstream provider configs can now include custom headers","released_at":"2026-09-18 16:22:26","reason":"found in this entry's text, named in this entry"},{"version":"2.1.277","anchor":"gateway-self-host-config-per-upstream-custom-headers-and-a","heading":"Gateway self-host config: per-upstream custom headers, and a new loopback guard on telemetry forwarding","line":"Gateway config adds per-upstream custom headers and blocks loopback telemetry URLs unless explicitly allowed","released_at":"2026-09-18 16:22:26","reason":"found in this entry's text, named in this entry"},{"version":"2.1.260","anchor":"mcp-web-search-built-in-server-pushes-api-keys-out-of-heade","heading":"MCP web-search built-in server pushes API keys out of headers","line":"Web-search MCP server config now steers you away from putting API keys directly in headers.","released_at":"2026-09-03 22:32:02","reason":"found in this entry's text"},{"version":"2.1.260","anchor":"headers-field-redaction-changed-from-drop-to-presence","heading":"Headers field redaction changed from 'drop' to 'presence'","line":"Web search server headers now redact as 'presence' instead of being dropped entirely.","released_at":"2026-09-03 22:32:02","reason":"found in this entry's text"},{"version":"2.1.238","anchor":"plugin-marketplaces-and-archives-can-mint-http-headers-from-","heading":"Plugin marketplaces and archives can mint HTTP headers from a command","line":"Marketplaces and plugins can run a command to mint short-lived HTTP headers for fetching archives.","released_at":"2026-08-20 18:01:54","reason":"found in this entry's text"},{"version":"2.1.238","anchor":"zip-archive-plugin-entries-can-carry-their-own-fetch-credent","heading":"Zip-archive plugin entries can carry their own fetch credentials","line":"Plugin archives can carry their own fetch headers or a helper command instead of inheriting them.","released_at":"2026-08-20 18:01:54","reason":"named in this entry, found in this entry's text"},{"version":"2.1.238","anchor":"marketplace-validation-flags-unsafe-archive-credential-setup","heading":"Marketplace validation flags unsafe archive credential setups","line":"Marketplace validation now warns about unsafe `headersHelper` and missing `sha256` setups.","released_at":"2026-08-20 18:01:54","reason":"named in this entry, found in this entry's text"},{"version":"0.2.106","anchor":"http-headers-support-for-sse-connections","heading":"HTTP Headers Support for SSE Connections","line":null,"released_at":"2025-05-09 02:33:11","reason":"found in this entry's text"}],"entries_total":10,"docs":[{"source":"api","path":"about-claude\/models\/migration-guide","title":"Or, for the model with the same capabilities and no access approval requirement:","documented":false},{"source":"api","path":"about-claude\/models\/optimizing-for-cost-and-intelligence","title":"optimizing-for-cost-and-intelligence","documented":false},{"source":"api","path":"about-claude\/use-case-guides\/legal-summarization","title":"legal-summarization","documented":false},{"source":"api","path":"agents-and-tools\/agent-skills\/claude-api-skill","title":"claude-api-skill","documented":false},{"source":"api","path":"agents-and-tools\/mcp-tunnels\/reference","title":"reference","documented":false},{"source":"api","path":"agents-and-tools\/tool-use\/bash-tool","title":"bash-tool","documented":false},{"source":"api","path":"agents-and-tools\/tool-use\/code-execution-tool","title":"code-execution-tool","documented":false},{"source":"api","path":"agents-and-tools\/tool-use\/computer-use-tool","title":"computer-use-tool","documented":false},{"source":"api","path":"agents-and-tools\/tool-use\/overview","title":"overview","documented":false},{"source":"api","path":"agents-and-tools\/tool-use\/tool-reference","title":"tool-reference","documented":false}],"docs_total":12,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/headers","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}