The disableNonessentialServices and disableDeepLinkRegistration managed settings now have failClosedValue: true, so if the managed-settings value can't be read or verified, the CLI defaults to the safe, blocking behavior instead of leaving the feature open.
Names in the bundledisableNonessentialServicesdisableDeepLinkRegistration
Documented inclaude-docs/cowork/changelog
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up disableNonessentialServices, on Configuration reference.
| <span id="disablenonessentialservices" />Block nonessential services<br />`disableNonessentialServices` | `boolean` | MDM + Bootstrap<br />Added in 1.2581.0 | `false` | Connector favicons and the artifact-preview and MCP Apps widget ifra…third-party/claude-desktop/configuration see the edit
Confirmed since
Anthropic's documentation has since written up disableDeepLinkRegistration, on Configuration reference.
| <span id="disabledeeplinkregistration" />Disable claude:// deep-link handling<br />`disableDeepLinkRegistration` | `boolean` | MDM + Bootstrap<br />Added in 1.6889.0 | `false` | Stop external apps and websites from opening Claude Desktop…third-party/claude-desktop/configuration see the edit
Added since
A small documentation edit on Telemetry and egress touched a line naming disableNonessentialServices after this was published.
With `disableEssentialTelemetry`, `disableNonessentialTelemetry`, `disableNonessentialServices`, and `disableAutoUpdates` all set to `true`, the desktop application makes **no outbound connections to Anthropic-operated hosts at runtime**. …third-party/claude-desktop/telemetry see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
A small documentation edit on Telemetry and egress touched a line naming disableNonessentialServices after this was published.