Two new settings let a bootstrap config server require authentication on its config fetch: bootstrapHeaders for static headers, and bootstrapHeadersHelper for an executable that prints headers as JSON, with its output cached for a few minutes. This supports a service-account credential or rotating token without embedding user:pass@ in the URL.
Names in the bundlebootstrapHeadersbootstrapHeadersHelper
Documented inclaude-docs/cowork/changelog
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up bootstrapHeadersHelper, on Deploy with a bootstrap server.
| <span id="bootstrapheadershelper" />Bootstrap headers helper script<br />`bootstrapHeadersHelper` | `string` | MDM only<br />Added in 1.32885.1 | — | Absolute path to an executable that prints a JSON object of bootstrap request headers. …third-party/claude-desktop/bootstrap see the edit
Confirmed since
Anthropic's documentation has since written up bootstrapHeaders, on Deploy with a bootstrap server.
| <span id="bootstrapheaders" />Bootstrap request headers<br />`bootstrapHeaders` | `object` | MDM only<br />Added in 1.32885.1 | — | HTTP headers sent on every bootstrap config fetch. Use this instead of embedding user:pass@ in the URL. D…third-party/claude-desktop/bootstrap see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up bootstrapHeaders, on Deploy with a bootstrap server.