Managed settings merge mode now documents which fields the helper replaces wholesale rather than merging.
The documentation for a helper's managedSettings 'merge' mode now spells out per-field composition rules: helper scalars win, arrays union, and objects merge, except for a fixed list of fields — fallbackModel, forceLoginOrgUUID, sandbox.filesystem.allowRead, sandbox.credentials.awsPairs, sandbox.ripgrep, and restriction allowlists like allowedMcpServers, availableModels, and allowedHttpHookUrls — where the helper's value replaces the source's wholesale when it emits one. Permission tightening remains deny-only.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
* [Server-managed settings](/docs/en/server-managed-settings): deliver `allowedMcpServers` and `deniedMcpServers` from the claude.ai admin consolemanaged-mcp see the edit
| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail…settings-reference see the edit
| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail…settings-reference see the edit
| `allowedHttpHookUrls` | Claude Code enforces an empty managed [allowlist](/docs/en/settings-reference#allowedhttphookurls) until you fix the value, so an HTTP hook runs only if another settings file lists its URL. If only an individual e…managed-settings see the edit
Anthropic's documentation has since written up allowedHttpHookUrls, on Deploy managed settings.
Changed managedSourcesBehavior: "merge" to take sandbox.credentials.awsPairs and sandbox.ripgrep whole from the highest managed source that…