The documentation for a helper's managedSettings 'merge' mode now spells out per-field composition rules: helper scalars win, arrays union, and objects merge, except for a fixed list of fields — fallbackModel, forceLoginOrgUUID, sandbox.filesystem.allowRead, sandbox.credentials.awsPairs, sandbox.ripgrep, and restriction allowlists like allowedMcpServers, availableModels, and allowedHttpHookUrls — where the helper's value replaces the source's wholesale when it emits one. Permission tightening remains deny-only.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Added since
A small documentation edit on Control MCP server access for your organization touched a line naming allowedMcpServers after this was published.
* [Server-managed settings](/docs/en/server-managed-settings): deliver `allowedMcpServers` and `deniedMcpServers` from the claude.ai admin consolemanaged-mcp see the edit
Confirmed since
Anthropic's documentation has since written up fallbackModel, on All settings.
| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail…settings-reference see the edit
Confirmed since
Anthropic's documentation has since written up allowedMcpServers, on All settings.
| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail…settings-reference see the edit
Confirmed since
Anthropic's documentation has since written up allowedHttpHookUrls, on Deploy managed settings.
| `allowedHttpHookUrls` | Claude Code enforces an empty managed [allowlist](/docs/en/settings-reference#allowedhttphookurls) until you fix the value, so an HTTP hook runs only if another settings file lists its URL. If only an individual e…managed-settings see the edit
Two sources agreeTwo things we can check say the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up allowedHttpHookUrls, on Deploy managed settings.
Anthropic's release notes agree
Changed managedSourcesBehavior: "merge" to take sandbox.credentials.awsPairs and sandbox.ripgrep whole from the highest managed source that…