Settings keys, all 1,548.

copied ◇ Artifact publishing can copy files from other artifacts server-side, but it's off by default.never mined ·never mined copiedFiles ◇ Publishing an artifact can now copy in files from other artifacts.never mined ·never mined copy ◇ Marketplaces can install a plugin by running a command that prints a directory path, with your consent.never mined ·never mined core.askPass ◇ Every git command Claude runs now has hooks, filesystem monitors and prompt helpers turned off.never mined ·never mined core.fsmonitor ◇ Stray git environment variables in your shell can no longer misdirect worktree operations.never mined ·never mined core.sparseCheckout ◇ Worktree sync now writes the complete tree in repositories using sparse checkout.never mined ·never mined core.sshCommand ◇ Git commands Claude runs can't prompt you for credentials or trust unknown SSH hosts anymore.never mined ·never mined cost_ceiling ◇ An eval suite stops immediately when the first run is rejected for bad credentials.v2.1.301 ○gone costBasis ◇ Usage records now say whether cost came from built-in prices, your org's rates, or a guess.never mined ·never mined costUsd ◇ Plugin eval guidance now names the real fields, suite.plugins and costUsd.v2.1.301 ○gone coworkEDRIntegration ◇ Two new admin settings let organizations supply a signed security vendor package that the Cowork workspace installs as root when it starts, on macOSnever mined ·never mined coworkEDRIntegrationVendor ◇ Two new admin settings let organizations supply a signed security vendor package that the Cowork workspace installs as root when it starts, on macOSnever mined ·never mined coworkTabEnabled ◇ Cowork/Code toggles now default to disabled instead of enabled if config can't be verified.never mined ·never mined cowritten ◇ Artifacts can now be stamped as co-written with an optional title, with no switch you can flip.never mined ·never mined cpuacct.usage ◇ CPU telemetry now reads cgroup usage from a fixed path and adds a new shell CPU time metricnever mined ·never mined credential ◇ Git settings passed through GIT_CONFIG_PARAMETERS may now give a per-host credential helper an empty value, which clears itv2.1.301 ○gone credentialHeadersWarn ◇ MCP and inference config now warn when headers look like they leak credentials over plain HTTP or shared tokens.never mined ·never mined credentialHelper ◇ For url marketplace sources, a credentialHelper may print HTTP headers as a JSON object instead of only an Authorization valuenever mined ·never mined credentialKind ◇ Plugin marketplaces can now authenticate using the app's existing inference credential.never mined ·never mined credentials.awsPairs ◇ Conflicting AWS credential pairs in the sandbox now resolve predictably and warn about risky setups.never mined ·never mined credentials.envVars ◇ Sandbox credential masking adds JWT decoding, per-claim masking, and scrubbing of duplicate secret valuesnever mined ·never mined credentials.files ◇ Settings docs now explain that masked credential files survive a relaxed sandbox filesystem policy while denied ones do not.never mined ·never mined credentials.sigv4 ◇ AWS calls from inside the sandbox now work with masked credentials, since the proxy re-signs them for you.never mined ·never mined cri.enabled ◇ If key material can't be fetched, the gateway answers 503 with a retry hint instead of an auth error.never mined ·never mined crossSessionInbound Choose whether Claude Code delivers messages from your other sessions, shows a notice without delivering them, or refuses themv2.1.224 → v2.1.283 ○gone cursor ◇ Published artifacts can gain a document database Claude reads and writes, off unless you set the env var.never mined ·never mined cutAt ◇ Hook event payloads sent to Claude Code hooks now include a cutAt fieldnever mined ·never mined daemon.lock ◇ An unsignalable daemon lock PID is now checked for recycling or predating boot before the lock is replaced as stale.never mined ·never mined daemonColdStart ◇ What happens when the background daemon is needed and none is running. With ask, if installing the daemon as a persistent service is possible here (among other checks, CLAUDE_CONFIG_DIR must be unset) and the install prompt has not been dismissed before, Claude Code returns an offer to install it (No background daemon is running. Run 'claude daemon install'...) instead of spawning one; otherwise, and with transient, it spawns a daemon for this login session. The env var CLAUDE_CODE_DAEMON_COLD_START (transient or ask) overrides the setting, and with neither set the default is ask when the tengu_quiet_harbor flag is on and transient otherwise.v2.1.138 or earlier → v2.1.283 ○gone dangerouslyDisableSandbox ◇ The MCP server you expose now validates tool arguments and aborts work when a client cancels.never mined ·never mined dbVerbsOn ◇ New per-organization capability flags for database verbs and run-script support in Artifacts, off by defaultnever mined ·never mined deadline ◇ Your turn can pause up to two seconds waiting for memory directory files to load first.never mined ·never mined decidedBy ◇ Permission approvals now record whether a hook, the host tool, or a normal prompt approved themnever mined ·never mined declare ◇ Shell command safety check now catches more declare/typeset/local flag combinations, and drops a narrower older checknever mined ·never mined decode ◇ Malformed JWT masking options in credential rules are now discarded.never mined ·never mined dedupUnchangedReads ◇ A read can opt out of the suppression that hides re-reads of unchanged files.never mined ·never mined default ◇ Subagent nudging behaviour can be picked per model, but the whole feature stays behind a gate.never mined ·never mined defaultedToCloud ◇ Session startup config gains a new defaultedToCloud fieldnever mined ·never mined defaultEnvironmentId ◇ Under remote. Environment ID used for cloud sessions, taken from the highest-precedence settings source that sets it. A self-hosted pool ID (prefix ccpool_) is honoured from user, policy or flag settings; from any other source it is skipped with a warning and the next source is used. Choosing an environment with /remote-env writes it to user settings and clears any value in local settings.v2.1.138 or earlier → v2.1.283 ○gone defaultMode ◇ Saying yes to the auto-mode prompt now actually saves auto as your default permission mode.never mined ·never mined defaultSettings ◇ Settings validation now warns when policy helper keys are nested where nothing reads them.never mined ·never mined defaultShell Choose whether Bash or PowerShell runs the shell commands you type with the ! prefixv2.1.138 or earlier → v2.1.283 ○gone defaultToNo ◇ SDK hosts are told when a permission prompt must default to no and not pre-select approve.never mined ·never mined deferFirstPrompt ◇ Device-bound session creation can now defer sending the first prompt separatelynever mined ·never mined deferHookMessages ◇ Hook messages can now be held back and inserted into the transcript later instead of immediatelynever mined ·never mined deferInitialMessage ◇ Cloud session creation can now send the first prompt separately, after permission mode is confirmednever mined ·never mined deferredCuts ◇ No description from anybody.v2.1.301 ○gone definitionNotice ◇ Resuming an in-process teammate can now surface a notice that its agent definition changednever mined ·never mined delete ◇ Transcript writing can be redirected to a different storage layer, but nothing turns that on here.never mined ·never mined deliverables ◇ Workshop pages can list deliverable links as a classified list, but workshop rendering is off here.never mined ·never mined deniedDomains ◇ Sandbox domain lists now reject overly broad wildcard patterns like *.comnever mined ·never mined deniedMcpServers Block specific MCP servers by URL, command, or namev2.1.138 or earlier → v2.1.283 ○gone deniedModels Block specific models, even ones availableModels permitsv2.1.283 ○gone deniedResolvedAddresses ◇ A new sandbox network setting, deniedResolvedAddresses, blocks allowed hostnames that turn out to point at IP addresses or ranges you listnever mined ·never mined deny ◇ Sandbox credential masking now documents that it falls back to deny on macOS and Windows.never mined ·never mined deny_cidrs ◇ No description from anybody.v2.1.287 → v2.1.306 ○gone denyAllNetwork ◇ Claude Code's sandbox can now block all network access for a command without starting a proxy, except on Windowsnever mined ·never mined denyAllNetworkOption ◇ Claude Code now passes a deny-all-network option through to the sandbox, and one sandbox configuration turns it onnever mined ·never mined denyRead ◇ Under a relaxed sandbox filesystem policy, the outside-reads block does nothing and this is now logged.never mined ·never mined denyRulesUnjudged ◇ Bash permission checks now also cover shell redirects and env-based argument rewriting, asking instead of silently allowing when unsurenever mined ·never mined dependencies ◇ Hooks modules can now declare dependencies that control their load ordernever mined ·never mined dependency_pinned_version_unsatisfied ◇ No description from anybody.v2.1.301 ○gone dependency_policy_blocked ◇ Plugin enable/disable failures now return a machine-readable failureCode alongside the human-readable error messagev2.1.301 ○gone describeTool ◇ New model guidance tells Claude to learn connector tool argument and result shapes carefully before publishing a page that uses themnever mined ·never mined description ◇ Bug reports you file now follow a fixed bullet template instead of free-form prose.v2.1.284 → v2.1.308 ◆in the build design ◇ A /design skill drafting multi-artboard canvases as editable Artifacts is bundled but switched off.never mined ·never mined desktopSessionCleanupPeriodDays Set an age limit in days for Claude Desktop and Cowork transcriptsv2.1.248 → v2.1.283 ○gone desktopSessionPayload ◇ The apps gateway no longer sends managed policy to Claude Desktop sessions unless that policy includes a desktop-specific versionnever mined ·never mined detail ◇ The bridge's context-usage handler forwards a detail argument, so remote clients can ask for coarser reporting.never mined ·never mined device_authorization ◇ Self-hosted gateway's OAuth device-login rate-limit errors now explain shared-network causes and point to specific settingsv2.1.287 → v2.1.306 ○gone device_verify ◇ No description from anybody.v2.1.287 → v2.1.306 ○gone devModsFolder ◇ Every way of loading a saved session now reads a dev mods folder value and keeps it on the sessionnever mined ·never mined dialogExpiry Set how long Claude Code waits for Remote Control or an SDK host to answer a forwarded dialog before it cancels the dialogv2.1.224 → v2.1.283 ○gone dictation ◇ A dictation network service was added to the always-allowed egress group ahead of the feature launching.never mined ·never mined dictation.enabled ◇ A voice dictation streaming endpoint is defined but only computed once dictation is enabled.never mined ·never mined dictationBaseUrl ◇ A voice dictation streaming endpoint is defined but only computed once dictation is enabled.never mined ·never mined dictationEnabled ◇ Admin schema adds dictationEnabled and sshClientPath, and dictation no longer switches off when allowOptionalClientAuth is truenever mined ·never mined diff ◇ Change detection no longer runs your external diff tool or scans submodules, so it's faster.never mined ·never mined diff.relative ◇ Diffs read from a subdirectory are no longer shortened by your git diff.relative setting.never mined ·never mined diffAdded ◇ Diff colours now come from your theme, using new added and removed theme keys.never mined ·never mined diffAddedDimmed ◇ Diff colours now come from your theme, using new added and removed theme keys.never mined ·never mined diffAddedWord ◇ Diff colours now come from your theme, using new added and removed theme keys.never mined ·never mined diffRemoved ◇ Diff colours now come from your theme, using new added and removed theme keys.never mined ·never mined diffRemovedDimmed ◇ Diff colours now come from your theme, using new added and removed theme keys.never mined ·never mined diffSidebarBaseMode ◇ A diff sidebar can switch tabs and cycle its comparison base, remembered in a setting.never mined ·never mined diffSidebarOpen ◇ A diff sidebar can switch tabs and cycle its comparison base, remembered in a setting.never mined ·never mined dimColor ◇ Plugin UI Button, Input, and Select components gain new action, dimColor, and autoFocus propsnever mined ·never mined directory ◇ You can now run a hook whenever a directory is added mid-session, including via /add-dir.never mined ·never mined directory_binding_unreadable ◇ Plugin updates have five new directory-related failure codes, and an update now fails with directory_commit_mismatch when a new check rejects itv2.1.301 ○gone directory_identity_changed ◇ Plugin updates have five new directory-related failure codes, and an update now fails with directory_commit_mismatch when a new check rejects itv2.1.301 ○gone directory_listing_not_installable ◇ Plugin updates have five new directory-related failure codes, and an update now fails with directory_commit_mismatch when a new check rejects itv2.1.301 ○gone directory_not_in_session ◇ No description from anybody.v2.1.301 ○gone directory_off ◇ No description from anybody.v2.1.301 ○gone directory_unavailable ◇ Plugin updates have five new directory-related failure codes, and an update now fails with directory_commit_mismatch when a new check rejects itv2.1.301 ○gone directoryGrantOnly ◇ Permission prompts gain a directory-only grant mode alongside the existing block-outside-reads modenever mined ·never mined directUpstreams ◇ Governed-git push URLs are now only generated for GitHub repositoriesnever mined ·never mined disable ◇ Set disableAutoMode to "disable" to stop Claude Code ever falling back to auto permission mode.v2.1.301 ○gone DISABLE_AUTOUPDATER ◇ No description from anybody.v2.1.301 ○gone disableAgentView Turn off background agents and agent viewv2.1.139 → v2.1.283 ○gone disableAllHooks Turn off hooks, a custom status line, and a custom @ file suggestion command at oncev2.1.138 or earlier → v2.1.283 ○gone