The inferenceCustomHeaders field's guidance now explicitly warns not to put API keys, bearer tokens, or other credentials in it, a change from the previous guidance allowing generic per-request headers including auth. The legacy flat key inferenceGatewayHeaders is now marked deprecated, with an explicit message describing its fallback effect.
Names in the bundleinferenceCustomHeadersinferenceGatewayHeaders
Documented inclaude-docs/cowork/changelog
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up inferenceGatewayHeaders, on Configuration reference.
| <span id="inferencecustomheaders" />Custom inference headers<br />`inferenceCustomHeaders` | `object` | MDM + Bootstrap<br />Added in 1.8089.0 | — | Extra headers on every inference request — routing and tenant headers only (org IDs, Bed…third-party/claude-desktop/configuration see the edit
Confirmed since
Anthropic's documentation has since written up inferenceCustomHeaders, on Configuration reference.
| <span id="inferencecustomheaders" />Custom inference headers<br />`inferenceCustomHeaders` | `object` | MDM + Bootstrap<br />Added in 1.8089.0 | — | Extra headers on every inference request — routing and tenant headers only (org IDs, Bed…third-party/claude-desktop/configuration see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up inferenceCustomHeaders, on Configuration reference.