{"version":"2.1.193","anchor":"disablesideloadflags-enterprise-setting","canonical_anchor":"disablesideloadflags-enterprise-setting","heading":"disableSideloadFlags Enterprise Setting","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.193\/e\/disablesideloadflags-enterprise-setting","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.193","markdown":"### `disableSideloadFlags` Enterprise Setting\n\n**What**\n\nA new managed setting that blocks `--plugin-dir`, `--plugin-url`, `--agents`, and non-SDK `--mcp-config` CLI flags at startup, closing the CLI-flag bypass of `strictKnownMarketplaces`.\n\n**Details**\n\n- Only honored when set in **managed settings** (policy-controlled). Ignored in user, project, or local settings.\n- When a blocked flag is used, Claude Code exits with: \"X is disabled by your organization's managed settings (disableSideloadFlags). Plugins, custom agents, and MCP servers can only be loaded from sources your administrator has approved.\"\n- Pair with `allowedMcpServers` for per-server MCP control; this setting does **not** gate other MCP entry points such as `claude mcp add`, SDK `setMcpServers`, or `.mcp.json`.\n- Does not block MCP servers configured through approved marketplace sources.\n\n**Evidence**\n\nNew setting description (search for `\"disableSideloadFlags\"` or `\"rejects the --plugin-dir, --plugin-url, --agents\"`)"}