You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Managed SettingsArea: what it touches
ImprovementsKind: in v2.1.300,
ImprovementsSection of the release
What
Three changes to the settings administrators manage:
allowedPluginMcpServers is now marked as read by both the desktop app and Claude Code. MCP servers are extra tools that plugins can connect.
Lists of allowed outgoing network addresses now leave out any address marked for platforms other than the one you are on.
One policy setting's description now says that in third-party deployments it also stops Cowork's workspace image and tools from being downloaded ahead of time. They are downloaded when a task first needs them.
Why
Admins can expect allowedPluginMcpServers to apply in Claude Code, and network allowlists only include addresses for the machine's own platform.
