{"name":"managedMcpServers","slug":"managedmcpservers","family":"setting","title":"Settings keys","noun":"settings key","description":"Provide remote [MCP servers](https:\/\/code.claude.com\/docs\/en\/managed-mcp.md#provide-servers-through-managed-settings) to every user alongside the ones they add","description_source":"docs","described_by":{"doc":"claude-code\/settings-reference","title":"All settings"},"presence":{"first_seen":"2.1.259","removed_in":"2.1.284","in_current_build":false,"newest_mined":"2.1.319","builds":22,"mined_builds":159,"first_cited":{"version":"2.1.259","released_at":"2026-09-02 21:21:42","spans":11}},"aliases":[],"entries":[{"version":"2.1.305","anchor":"new-settings-key-attributionprojectpolicy-and-a-new-analytic","heading":"A setting named attributionProjectPolicy appears next to other managed settings","line":"The name `attributionProjectPolicy` now appears in a list of settings alongside `managedMcpServers`","released_at":"2026-10-20 19:29:36","reason":"found in this entry's text"},{"version":"2.1.300","anchor":"desktop-managed-settings-denied-plugin-mcp-servers-and-mor","heading":"Admins can block plugin MCP servers by address, and Claude Code reads more managed settings","line":"A new managed setting, deniedPluginMcpServers, blocks plugin MCP servers by address, and six more managed settings now list Claude Code as a reader","released_at":"2026-10-14 14:27:26","reason":"found in this entry's text"},{"version":"2.1.299","anchor":"reserved-mcp-server-name-message","heading":"Clearer messages when an MCP server uses a name or address Claude Code reserves","line":"MCP servers configured with a reserved name or address are now refused with an explicit message saying why","released_at":"2026-10-14 00:23:19","reason":"found in this entry's text"},{"version":"2.1.299","anchor":"plugin-hooks-runtime-settingsread-lists-managed-mcp-server","heading":"Plugins can read the managed MCP server list, and call timeouts are clearer","line":"Plugins reading policy settings now see managed MCP servers, and calls that time out get their own error","released_at":"2026-10-14 00:23:19","reason":"found in this entry's text"},{"version":"2.1.293","anchor":"managed-settings-schema-marketplaces-hot-apply-and-mcp-tool","heading":"Desktop admin policy gains marketplace and MCP tool-policy options","line":"Admin policy for the desktop app gains a live-apply rule for plugin marketplaces and a per-server tool policy override in managedMcpServers","released_at":"2026-10-07 17:18:04","reason":"found in this entry's text"},{"version":"2.1.293","anchor":"managed-config-hybrid-validation-google-oauth-client-secret","heading":"Hosted managed MCP config now refuses client secrets except Google ones","line":"Hosted managed config now rejects an MCP server's OAuth client secret unless it is a Google client, and points others to oauth.clientSecretHelper","released_at":"2026-10-07 17:18:04","reason":"found in this entry's text, named in this entry"},{"version":"2.1.283","anchor":"claude-code-gb-base-url-added-to-the-protected-env-var-set-i","heading":"CLAUDE_CODE_GB_BASE_URL gets the same settings checks as the proxy variables","line":"CLAUDE_CODE_GB_BASE_URL joins the proxy, certificate and bridge variables that Claude Code checks when it cleans a settings file","released_at":"2026-09-25 18:46:11","reason":"found in this entry's text"},{"version":"2.1.273","anchor":"new-managed-only-settings-key-isolation","heading":"New managed-only settings key: isolation","line":"The new 'isolation' settings key is now managed-only, like managedMcpServers, and gets stripped with a warning if set elsewhere","released_at":"2026-09-15 18:06:34","reason":"found in this entry's text"},{"version":"2.1.269","anchor":"fixed-a-bug-in-mcp-server-enumeration-that-ignored-the-calle","heading":"Fixed a bug in MCP server enumeration that ignored the caller's arguments","line":"Fixed a bug where the list of enabled MCP servers ignored the caller's actual allowlist and managed-server settings","released_at":"2026-09-11 18:12:49","reason":"found in this entry's text, named in this entry"},{"version":"2.1.267","anchor":"new-sec-default-hooks-module-locks-plugins-out-of-classic","heading":"New \"sec-default\" hooks module locks plugins out of classic hooks\/prompt\/settings\/tool policy for managed orgs","line":"A new sec-default hooks module blocks plugins from bypassing policy settings and MCP server allowlists on managed and Team\/Enterprise accounts","released_at":"2026-09-09 18:25:42","reason":"found in this entry's text"}],"entries_total":18,"docs":[{"source":"claude-code","path":"settings-reference","title":"All settings","documented":true},{"source":"claude-code","path":"admin-setup","title":"Set up Claude Code for your organization","documented":false},{"source":"claude-code","path":"claude-apps-gateway","title":"Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry","documented":false},{"source":"claude-code","path":"claude-apps-gateway-config","title":"Claude apps gateway configuration","documented":false},{"source":"claude-code","path":"desktop","title":"Desktop application","documented":false},{"source":"claude-code","path":"managed-mcp","title":"Control MCP server access for your organization","documented":false},{"source":"claude-code","path":"managed-settings","title":"Deploy managed settings","documented":false},{"source":"claude-code","path":"mcp","title":"Connect Claude Code to tools via MCP","documented":false},{"source":"claude-code","path":"monitoring-usage","title":"Monitoring","documented":false},{"source":"claude-code","path":"self-hosted-environments-configuration","title":"Customize sessions in self-hosted environments","documented":false}],"docs_total":13,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/managedmcpservers","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}