Built-in web search can now be disabled or gated via policy without host list

WebSearch can now be disabled or gated entirely without needing a host list.

Read from

Names in the bundledisabledBuiltinToolsbuiltinToolPolicyWebSearch

What the documentation says

Documented inclaude-code/claude-apps-gateway-config

Since it was published

The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.

Added since 22 Sep 2026 A small documentation edit on Test plugins with evals touched a line naming WebSearch after this was published. Runs never stop to ask for permission. Built-in tools that need a grant you didn't give, such as `Bash`, `Write`, `Edit`, `WebFetch`, and `WebSearch`, are removed from the session, so Claude can't call them at all. plugin-evals see the edit

Confirmed since 15 Sep 2026 Anthropic's documentation has since written up builtinToolPolicy, on Configuration reference. | <span id="builtintoolpolicy" />Built-in tool policy<br />`builtinToolPolicy` | `object` | MDM + Bootstrap<br />Added in 1.8089.0 | — | Approval policy per built-in tool or argument-scoped rule such as Bash(curl \*). “ask” requires user a… third-party/claude-desktop/configuration see the edit

Confirmed since 15 Sep 2026 Anthropic's documentation has since written up disabledBuiltinTools, on Configuration reference. | <span id="disabledbuiltintools" />Disabled built-in tools<br />`disabledBuiltinTools` | `string[]` | MDM + Bootstrap<br />Added in 1.2581.0 | — | Built-in tools, or argument-scoped permission rules such as Read(\*\*/.env), denied in Cowo… third-party/claude-desktop/configuration see the edit

Added since 11 Sep 2026 A small documentation edit on Telemetry and egress touched a line naming disabledBuiltinTools after this was published. With `disableEssentialTelemetry`, `disableNonessentialTelemetry`, `disableNonessentialServices`, and `disableAutoUpdates` all set to `true`, the desktop application makes **no outbound connections to Anthropic-operated hosts at runtime**. … third-party/claude-desktop/telemetry see the edit

Confirmed since 10 Sep 2026 Anthropic's documentation has since written up WebSearch, on Archive Session. - `BetaManagedAgentsWebSearchToolConfig object` api/beta/sessions/archive see the edit

How sure we are

One source agreesOne thing we can check says the same as this entry.

Anthropic's documentation agreesAnthropic's documentation has since written up WebSearch, on Archive Session.

See this entry in the whole of v2.1.260 →