What
Deny rules are permission rules that stop Claude Code from using certain tools or actions. A built-in plugin, cc-plugin-sec-default@builtin, now checks each tool use and puts back any deny rule that another plugin has lifted. Its options are set under pluginConfigs:
allowModsToOverrideDenyRuleslets other plugins lift deny rules.allowManagedModsOnlyrefuses plugins that do not come from your organization.
If the plugin cannot read its settings, it fails closed, meaning it keeps the restrictions in place.
Why
Plugins can no longer quietly weaken your deny rules unless you allow it, and organizations can limit Claude Code to their own plugins.
Names in the bundlecc-plugin-sec-default@builtinpluginConfigs
Documented inclaude-code/plugins/mods/admin
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up cc-plugin-sec-default@builtin, on Manage mods for your organization.
"cc-plugin-sec-default@builtin": {plugins/mods/admin see the edit
Confirmed since
Anthropic's documentation has since written up pluginConfigs, on Manage Claude Code plugins for your organization.
* **`allowManagedModsOnly`**: this is an option on a built-in plugin, which you set under `pluginConfigs` in managed settings. See [Stop user-installed mods from loading](/docs/en/plugins/mods/admin#stop-user-installed-mods-from-loading).plugins/org see the edit
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
Whether this built-in plugin is active by default is not known.
Anthropic's documentation agrees
Anthropic's documentation has since written up pluginConfigs, on Manage Claude Code plugins for your organization.