Admins can now allowlist which SSH hosts users may connect to for remote Code sessions.
A new managed-settings key, sshHostAllowlist, lets admins list SSH hosts (exact hostnames or *. wildcards) that users may connect to for Claude Code desktop sessions run over SSH; if it's unset or empty, the SSH option is hidden and connection attempts are refused. Allowed connections forward the session's inference credential, but only if it's token-based — file-based credentials such as Bedrock IAM Identity Center or Vertex creds are refused — along with the OTLP endpoint and auth headers. This is an opt-in beta feature.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
| <span id="sshhostallowlist" />SSH host allowlist<br />`sshHostAllowlist` | `string[]` | MDM + Bootstrap · Beta | — | SSH hosts users may connect to for Code sessions. Empty or unset: off unless the device’s Claude Code managed-settings a…third-party/claude-desktop/configuration see the edit
Anthropic's documentation has since written up sshHostAllowlist, on Configuration reference.