url
A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Your MCP allow and deny rules now match servers whose commands or URLs use environment variables.
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.219.
In the changelogs
64Releases whose published page names url.
-
v2.1.309
Clearer rules and errors when Claude publishes Artifact files
The Artifact tool now spells out how file paths are served from
root, and gives detailed errors when nothing was publishedfound in this entry's text
-
v2.1.309
The artifact tool no longer publishes combined pull-request review pages
The artifact tool can no longer publish composed pull request review pages, and creating from a type can now need a person's consent
found in this entry's text
-
v2.1.309
MCP server settings can carry a ready-made listing
MCP server settings with a url can now include a handed_listing, and cached servers can reuse details from an earlier connection
found in this entry's text
-
v2.1.309
Built-in Chrome server left out of the policy-blocked MCP server warning
The warning about MCP servers blocked by policy no longer lists the built-in Chrome server when Claude Code handles it separately
found in this entry's text
-
v2.1.309
After creating an Artifact from a type, Claude is told where it is served from
When Claude creates an Artifact from a type, it now gets the served path and root folder and is told to use them when updating it
found in this entry's text
-
v2.1.300
New managed setting for self-hosted session hosts
Managed settings gain a beta
selfHostedsection with a host URL and a credential type, shown under "Self-hosted execution"found in this entry's text
-
v2.1.293
Marketplace credential helpers can now supply HTTP headers for URL sources
For
urlmarketplace sources, acredentialHelpermay print HTTP headers as a JSON object instead of only an Authorization valuefound in this entry's text
-
v2.1.290
Creating a cloud session now reports what was not applied
The cloud session create command now prints a notice and a list of what was not applied, also adding both to its JSON output
found in this entry's text
-
v2.1.284
Claude is told to read an artifact before publishing changes to it
The Artifact tool's instructions now accept only claude.ai artifact links and say a publish is refused unless Claude has read the artifact first
found in this entry's text
-
v2.1.283
Self-hosted runners move git certificate settings into each session's git config
On git 2.31 or newer, runners move GIT_SSL_CAINFO and GIT_SSL_NO_VERIFY into session git config so governed hosts are still verified
found in this entry's text
-
v2.1.283
Large artifacts can be uploaded over several publishes
Artifact limits are now split between each publish and each version, so files beyond one publish's cap can go up in a later publish
found in this entry's text
-
v2.1.281
Plugin Directory marketplace code added but compiled out
Code for an Anthropic plugin directory marketplace is present but cannot switch on in this build
found in this entry's text
-
v2.1.281
Managed config: serve_to_desktop and optional marketplace SHA
Managed config entries accept serve_to_desktop, and marketplace entries no longer need a SHA-256, falling back to available without one
found in this entry's text
-
v2.1.281
Artifact database tool description gains a 'People' section and an action: "profiles" lookup
The artifact database tool's description now explains person ids and an action: "profiles" lookup for details such as guest status
found in this entry's text
-
v2.1.281
Plugin validation now checks a plugin's MCP server files
Plugin validation now checks a plugin's MCP server files for bad settings, insecure addresses and credentials left in plain text
found in this entry's text
-
v2.1.281
Plugins pinned to a directory are cloned without submodules
Plugins with a directory pin are now cloned without fetching git submodules
found in this entry's text
-
v2.1.281
Managed marketplace auto_install/required entries without a pin are treated as available
Managed
auto_installorrequiredmarketplace entries without a pin are treated asavailableand flagged as a config warningfound in this entry's text
-
v2.1.277
Gateway self-host config: per-upstream custom headers, and a new loopback guard on telemetry forwarding
Gateway config adds per-upstream custom headers and blocks loopback telemetry URLs unless explicitly allowed
found in this entry's text
-
v2.1.275
Marketplace add gets a stricter no-replace safeguard for URL sources
Adding a plugin marketplace from a URL now guards more strictly against overwriting an existing one
found in this entry's text
-
v2.1.275
New artifact watch error: 'watch target changed' when action/url no longer matches the approved watch
New error tells the user to retry when an artifact watch's action or URL no longer matches
found in this entry's text
-
v2.1.275
Artifact URL 'update in place' now allows granted editors, not just owners
Artifact 'update in place' now works for editors given write access, not just the owner
found in this entry's text
-
v2.1.271
Optional delete/open/pin verbs for artifacts, each independently gated
Artifacts gain optional delete, open, and pin actions, each turned on separately
found in this entry's text
-
v2.1.269
WebFetch/artifact-read tool also moves to
create()instance pattern with new renderToolUseMessage and prompt hookThe WebFetch tool moves to the newer
create()internal structure and gains a verbose-mode message and prompt hookfound in this entry's text
-
v2.1.268
Push-on-release message clarifies runner-side credential behaviour and pushInsteadOf skip
Push-on-release failure message now explains credential and pushInsteadOf behavior more precisely
found in this entry's text
-
v2.1.267
Artifact create-from-type now also rejects a
deadlinefieldCreating an Artifact from a type_url now also rejects a stray deadline field
found in this entry's text
-
v2.1.267
New artifact tool action: "open"
Artifacts tool gains an "open" action to display an existing artifact without publishing it
found in this entry's text
-
v2.1.265
Verify tool now refuses url-less calls for delegated-observation agents
The verify tool now rejects url-less calls made on behalf of delegated observation agents
found in this entry's text
-
v2.1.265
CRI/gateway loopback config validator gains an escape-hatch env var
Gateway loopback check now also covers cri.issuer and cri.policy.webhook.url, not just cri.jwks_url
found in this entry's text
-
v2.1.261
--claudeaiflag lets you add a claude.ai-hosted plugin marketplaceYou can now add a claude.ai-hosted plugin marketplace with a new --claudeai flag.
found in this entry's text
-
v2.1.261
Artifact comments tool now validates the read target hasn't changed before serving results
Artifact comments now verify the read target hasn't changed before serving results.
found in this entry's text
-
v2.1.260
New asset schema fields hint at cross-artifact asset copying
New schema fields hint at cross-artifact asset copying, but nothing uses them yet.
found in this entry's text
-
v2.1.260
Artifact asset store gains a server-side copy_from action
Artifact assets can now be copied server-side between artifacts without downloading them.
found in this entry's text
-
v2.1.260
Loopback/non-https URL rejection widened to array-valued bootstrap fields
URL safety checks now cover list-valued config fields, with a new setting to allow loopback response URLs.
found in this entry's text
-
v2.1.260
Plugin marketplaces gain an inference-credential auth mode
Plugin marketplaces can now authenticate using the app's existing inference credential.
found in this entry's text
-
v2.1.257
Artifact comments/watch tool renames its action vocabulary
Artifact comment actions are respelled: read replaces comments, watch with on false replaces unwatch, and old names now error.
found in this entry's text
-
v2.1.248
Publish hint about missing fields simplified
The publish hint about missing file_path or favicon is simpler now.
found in this entry's text
-
v2.1.246
Artifact asset uploads accept text files and return a URL to use as-is
Claude can upload CSV, Markdown, JSON and text files into an artifact and link them by returned URL.
found in this entry's text
-
v2.1.246
Publish-over-an-existing-page failures now distinguish a proxy block from an HTTP error
Publishing over an existing page now says whether a proxy block or an HTTP error stopped the check.
found in this entry's text
-
v2.1.242
Plugins can play sounds and speak, within per-session budgets
Plugins can play sounds and speak aloud, capped per session, on macOS and browser hosts only.
found in this entry's text
-
v2.1.239
Artifact tool rejects a URL pointing inside the artifact
Pointing the artifact tool at a URL inside the artifact now fails with a clear explanation.
found in this entry's text
-
v2.1.236
Artifact tool stops retrying after three identical rejections
The Artifact tool stops looping after three identical failures and reports the problem to you.
found in this entry's text
-
v2.1.236
Clearer Artifact tool errors for bad links and oversized pages
Artifact tool errors now tell you what to do next instead of just what broke.
found in this entry's text
-
v2.1.236
Artifact types (templates and starters), built end to end and off by default
You could start a private artifact from a published template, but two server switches keep it shut here.
found in this entry's text
-
v2.1.235
Design tool: an approved database read/write is now bound to the exact action and project slug
Design tool database read/write consent is now bound to the exact approved action and project slug
found in this entry's text
-
v2.1.235
Artifact asset permission scope and messages reworded
Artifact asset permission and error messages reworded, with broader scope and coverage
found in this entry's text
-
v2.1.234
Saved artifact HTML is sanitized and refused if it will not round-trip
Artifact saves get sanitized and refused if the content cannot be published cleanly, in a disabled skill.
found in this entry's text
-
v2.1.227
Artifact tool: put the title near the top, and pass a URL to update an existing artifact
To update an existing artifact you must pass its URL; find it with the list action.
named in this entry, found in this entry's text
-
v2.1.227
Publish instructions drop the "minted URL" wording
Publishing without a link is now described as creating a separate artifact, not updating one.
found in this entry's text
-
v2.1.225
Artifact comments listing gained pagination and single-thread lookup
You can now fetch a single artifact comment thread or page through long listings with a cursor.
found in this entry's text
-
v2.1.224
Create a cloud session without a terminal
Create a cloud session straight from the command line with --environment and a prompt, optionally as JSON.
found in this entry's text
-
v2.1.224
Git identity, commit signing and proxied clones for runner sessions
--configure-git sets a commit identity and installs SSH commit signing backed by a code-sign subcommand.
found in this entry's text
-
v2.1.221
Review pages are protected from overwrite and live-edit
Claude refuses to publish over or live-edit a page it identifies as a review page.
found in this entry's text
-
v2.1.219
MCP allow/deny rules compare expanded env-var values
Your MCP allow and deny rules now match servers whose commands or URLs use environment variables.
found in this entry's text
-
v2.1.219
MCP error text is sanitized and credential-redacted before display
MCP error messages now hide credentials and strip weird characters before showing them to you.
found in this entry's text
-
v2.1.203
Artifact Tool: Smarter url Parameter Guidance
found in this entry's text
-
v2.1.196
Enterprise Monitoring Notice
found in this entry's text
-
v2.1.195
MCP Tool Schema Normalization
found in this entry's text
-
v2.1.176
Footer Link Badges
found in this entry's text
-
v2.1.172
Artifact Tool
found in this entry's text
-
v2.1.119
New Settings
found in this entry's text
-
v2.1.113
Massive Internal Refactoring: Native Node.js Modules
found in this entry's text
- v2.1.56
-
v2.1.23
GitHub PR State Field
found in this entry's text
-
v2.0.72
Marketplace Blocklist Support
found in this entry's text
First cited
0No release's published evidence quotes this name. The ledger indexes the Evidence lines of every changelog on this site, so this says nobody here has ever quoted it; it says nothing about how old the name is.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.