{"version":"2.1.300","anchor":"managed-config-schema-credentials-in-url-rejection-and-off","canonical_anchor":"managed-config-schema-credentials-in-url-rejection-and-off","heading":"Managed config URLs that look like they contain a key are refused","tier":"notice","area":"Managed Settings","scope":"org","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/managed-config-schema-credentials-in-url-rejection-and-off","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300","markdown":"### Managed config URLs that look like they contain a key are refused\n\nClaude Desktop managed settings now refuse a config URL whose host, user name or password looks like an API key or token, and list crash dumps as data sent\n\n**What**\n\nThis affects administrators who set up Claude Desktop through managed configuration (settings pushed out by an organization). Config web addresses were already refused when they had credentials in the login part of the address. They are now also refused when the host name, user name or password looks like an API key or token, with a message saying it must not contain one.\n\nThe description of the \"Essential\" telemetry level (the basic usage and error data the app sends) in the desktop settings now lists crash dumps, described as unfiltered copies of part of the app's memory.\n\n**Why**\n\nAdministrators are stopped from putting a secret into a config address by mistake, and can see that the Essential level includes crash dumps.\n\n- Area: Managed Settings\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 1\/5\n- Scope: org\n- Heads-up: yes"}