Marketplace Blocklist Support / Claude Code v2.0.72

What

Administrators can now block specific marketplace sources via policy settings.

Details

New blockedMarketplaces policy setting to prevent installation from specific sources
Supports blocking by source type: github, git, url, npm, file, directory
Matches GitHub repos, git URLs, npm packages, and local paths
Cross-format matching (e.g., SSH and HTTPS GitHub URLs treated as equivalent)

Evidence

njA() at line 279108 (contains "blockedMarketplaces", tU3() for source matching logic)

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

The build it came inv2.0.72

17 Dec 2025 · 18 entries, this one is #4.

Either side of it

Open the release →

Names in this entry

settingblockedMarketplaces
Block plugin marketplace sources for your organization
settingurl
Your MCP allow and deny rules now match servers whose commands or URLs use environment variables.
settingdirectory
You can now run a hook whenever a directory is added mid-session, including via /add-dir.

Is this right?

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.