The settings schema documents remoteTools.allowUnattendedServing, and project, local and --settings values are ignored for it.
A new managed/user settings key remoteTools.allowUnattendedServing (settable in ~/.claude/settings.json at the org or user level) controls whether unattended remote-tool serving is allowed. When set to false, a cloud session in auto mode cannot run commands on the local computer without per-command approval; project/local/--settings values are ignored for this key. Invalid values fall back to allowUnattendedServing: !1 (false, i.e. no unattended serving), and the key is registered as non-restrictive in the settings policy list. The UI surfaces a specific explanation depending on whether it was turned off by the organization's settings ("Turned off by your organization's settings (remoteTools.allowUnattendedServing)") or the user's own settings.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
| `claude agents` | Open [agent view](/docs/en/agent-view) to monitor and dispatch parallel background sessions. Use `--cwd <path>` to show only sessions started under that directory, or `--json` to print active sessions as a JSON array fo…cli-reference see the edit
Anthropic's documentation has since written up --settings, on CLI reference.