{"name":"headersHelper","slug":"headershelper","family":"setting","title":"Settings keys","noun":"settings key","description":"The folder-trust prompt now lists commands a repo would run to mint HTTP headers.","description_source":"entry","described_by":{"version":"2.1.238","anchor":"trust-dialog-now-discloses-header-minting-and-marketplace-co"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":{"version":"2.1.238","released_at":"2026-08-20 18:01:54","spans":9}},"aliases":[],"entries":[{"version":"2.1.305","anchor":"plugin-header-commands-get-plugin-aware-env","heading":"Header helper commands from plugins now know which plugin they belong to","line":"The command that supplies extra request headers can now be given a plugin's identity, so its environment can include plugin variables","released_at":"2026-10-20 19:29:36","reason":"found in this entry's text, named in this entry"},{"version":"2.1.302","anchor":"mcp-auth-rejection-messages-moved-to-helper-functions","heading":"MCP credential rejection messages come from a shared message set","line":"Messages shown when an MCP server rejects a `headersHelper` credential or an Authorization header now come from one shared set of messages","released_at":"2026-10-16 16:48:28","reason":"found in this entry's text"},{"version":"2.1.302","anchor":"mcp-error-messages-vary-by-environment-start-a-new-task-or","heading":"MCP error messages can suggest a new task instead of \/mcp, plus rejected-header messages","line":"In some sessions, MCP errors now say to start a new task or chat instead of running \/mcp, and rejected credentials get their own messages","released_at":"2026-10-16 16:48:28","reason":"found in this entry's text"},{"version":"2.1.302","anchor":"mcp-rejected-credential-messages-moved-into-shared-helpers","heading":"Messages for rejected MCP server credentials are now built in one place","line":"Errors for an MCP server rejecting your `headersHelper` credential or Authorization header now come from shared code","released_at":"2026-10-16 16:48:28","reason":"found in this entry's text"},{"version":"2.1.300","anchor":"plugin-command-and-headershelper-sources-held-until-the-orga","heading":"Plugin commands wait until your organization's settings are read","line":"Plugin command sources and marketplace `headersHelper` commands no longer run in a tool server and wait until organization settings have loaded","released_at":"2026-10-14 14:27:26","reason":"found in this entry's text, named in this entry"},{"version":"2.1.299","anchor":"mcp-configured-headers-on-oauth-discoveryrevocation-reser","heading":"MCP sign-in requests now send your configured headers","line":"Configured MCP headers are now sent when finding OAuth details and revoking tokens, only to the same server","released_at":"2026-10-14 00:23:19","reason":"found in this entry's text, named in this entry"},{"version":"2.1.284","anchor":"claude-rc-in-an-untrusted-folder-now-asks-to-trust-it-inst","heading":"Remote Control asks to trust an untrusted folder instead of exiting","line":"Starting `claude rc` in an untrusted folder now shows a trust prompt with a y\/N question instead of printing an error and quitting","released_at":"2026-09-28 17:11:59","reason":"found in this entry's text"},{"version":"2.1.284","anchor":"plugin-marketplace-sources-embedded-credentials-stripped-s","heading":"Plugin marketplace sources can now have credentials removed and odd URLs refused","line":"Claude Code now has a check that strips usernames, passwords and headers from plugin marketplace sources and refuses suspicious URLs","released_at":"2026-09-28 17:11:59","reason":"found in this entry's text"},{"version":"2.1.281","anchor":"plugin-validation-now-checks-a-plugins-mcp-server-files","heading":"Plugin validation now checks a plugin's MCP server files","line":"Plugin validation now checks a plugin's MCP server files for bad settings, insecure addresses and credentials left in plain text","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text"},{"version":"2.1.273","anchor":"mcp-oauthauth-failure-messages-split-into-four-specific-cas","heading":"MCP OAuth\/auth failure messages split into four specific cases","line":"MCP authentication failure messages now split into four specific cases instead of two generic ones","released_at":"2026-09-15 18:06:34","reason":"found in this entry's text"}],"entries_total":21,"docs":[{"source":"claude-code","path":"changelog","title":"Claude Code changelog","documented":false},{"source":"claude-code","path":"claude-apps-gateway-config","title":"Claude apps gateway configuration","documented":false},{"source":"claude-code","path":"errors","title":"Error reference","documented":false},{"source":"claude-code","path":"hooks","title":"Hooks reference","documented":false},{"source":"claude-code","path":"managed-mcp","title":"Control MCP server access for your organization","documented":false},{"source":"claude-code","path":"managed-settings","title":"Deploy managed settings","documented":false},{"source":"claude-code","path":"mcp","title":"Connect Claude Code to tools via MCP","documented":false},{"source":"claude-code","path":"monitoring-usage","title":"Monitoring","documented":false},{"source":"claude-code","path":"permissions","title":"Configure permissions","documented":false},{"source":"claude-code","path":"plugins\/cli-reference","title":"Plugin commands reference","documented":false}],"docs_total":12,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/headershelper","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}