allowedPluginMarketplaces entries can now set credentialKind: "inferenceCredential" for url-sourced marketplaces. This sends the same credential the app already uses for its inference gateway or bootstrap server, so a marketplace hosted on that same origin needs no separate credential setup.
Names in the bundlecredentialKind
Documented inclaude-docs/cowork/changelog
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up credentialKind, on MCP, plugins, skills, and hooks.
| `credentialKind` | How it authenticates |third-party/claude-desktop/extensions see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up credentialKind, on MCP, plugins, skills, and hooks.