Anthropic Directory plugin marketplace with search, policy controls and stricter install checks

What

A plugin marketplace is a source you install plugins from. Claude Code adds a built-in one, the Anthropic Directory, built from the public plugin directory:

• Catalogue: listings are fetched from /api/directory/plugins and cached in plugin-directory-cache-v2.json. A listing is used only if it is pinned to a reviewed commit (reviewed_commit) and has a valid repository address. Otherwise it is skipped as no_pin, bad_url, bad_path or other_surface.
• On or off: your choice is stored in plugin-directory-marketplace.json. Where that file does not exist, the default could not be traced.
• Search: refused when the organisation policy allow_plugin_directory_search does not allow it, or when only essential traffic is allowed. The /plugin subcommands directory and search open a directory view with your query when a feature check passes, and otherwise open the plugin menu as before.
• Admin controls: managed settings can turn the directory off with disablePluginDirectory. Policy lists gain a pluginDirectory entry standing for this marketplace. Under strictKnownMarketplaces, any allowlist blocks it unless it is listed, and under blockedMarketplaces it can be blocked on its own.
• Update and uninstall: both check the directory more strictly and can fail with directory_binding_unreadable, directory_identity_changed, directory_listing_not_installable, plugin_policy_blocked, directory_unavailable, dependencies_not_installed or dependencies_not_screened. Before, the only message was "Plugin not found in marketplace".
• Uninstall refuses to run in a workspace you have not trusted and checks that the plugin is no longer enabled in your settings.
• A plugin removed from the directory gets a specific "not loaded" message.
• An update can also install the packages a plugin lists.
• The plugin:cycleMarketplace keyboard action is now accepted, and the marketplace list falls back to a default label for the default marketplace.

Where this code is called from was not found in every part of the release examined.

Why

This is a new place to find plugins, with directory plugins tied to the reviewed repository they came from. Administrators can allow, block or switch it off, and failed updates or uninstalls now say why.