{"version":"2.1.260","anchor":"new-ssh-host-allowlist-for-remote-code-sessions","canonical_anchor":"new-ssh-host-allowlist-for-remote-code-sessions","heading":"New SSH host allowlist for remote Code sessions","tier":"use","area":"Sessions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.260\/e\/new-ssh-host-allowlist-for-remote-code-sessions","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.260","markdown":"### New SSH host allowlist for remote Code sessions\n\nAdmins can now allowlist which SSH hosts users may connect to for remote Code sessions.\n\nA new managed-settings key, `sshHostAllowlist`, lets admins list SSH hosts (exact hostnames or `*.` wildcards) that users may connect to for Claude Code desktop sessions run over SSH; if it's unset or empty, the SSH option is hidden and connection attempts are refused. Allowed connections forward the session's inference credential, but only if it's token-based \u2014 file-based credentials such as Bedrock IAM Identity Center or Vertex creds are refused \u2014 along with the OTLP endpoint and auth headers. This is an opt-in beta feature.\n\n- Area: Sessions\n- Names: `sshHostAllowlist`\n- Tier: Use it now\n- Useful: 5\/5\n- Signal: 2\/5"}