{"version":"2.1.271","anchor":"plugin-manifest-config-filtering-excludes-sensitive-user-opt","canonical_anchor":"plugin-manifest-config-filtering-excludes-sensitive-user-opt","heading":"Plugin manifest config filtering excludes sensitive user options","tier":"internal","area":"Plugins","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.271\/e\/plugin-manifest-config-filtering-excludes-sensitive-user-opt","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.271","markdown":"### Plugin manifest config filtering excludes sensitive user options\n\nPlugin config summaries now exclude options marked sensitive\n\n**What**\n\nWhen Claude Code builds a summary of a plugin's configuration options, a new filtering step keeps only the options that are declared in the plugin's manifest under `userConfig` and that are not marked `sensitive`. That filtered, sorted list is then turned into a JSON summary.\n\n**Why**\n\nThis keeps sensitive plugin configuration values out of the serialized config summary, reducing the chance they get exposed somewhere they shouldn't be.\n\n- Area: Plugins\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5"}