Unclear Which plugins or plugin sources this check affects is not stated.
What
allowManagedPermissionRulesOnly makes managed settings (settings an organization's administrator sets centrally) the only place permission rules can come from. Its handling of plugins (add-on packages) changed.
- One check on whether a plugin's source is trusted now also fails when managed settings set
allowManagedPermissionRulesOnlyto true and Claude Code is in a managed mode. - The setting's description now says plugins delivered by the host app through
--plugin-dirkeep theirallowed-tools(tools they may use without asking) only in Claude Desktop, and only while the setting is not set by the organization's own managed settings. Before, it said these plugins kept theirallowed-toolswith no such condition.
Why
In organizations that turn this setting on, some plugins may no longer be treated as trusted, and Desktop plugins loaded with --plugin-dir may need to ask before using tools they previously used freely.
Names in the bundleallowManagedPermissionRulesOnly
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
Which plugins or plugin sources this check affects is not stated.
Anthropic's release notes agree
Changed plugins that Claude Desktop mounts by path to no longer keep their allowed-tools when your organization's managed settings set…