What
Managed settings are rules an organisation's administrator sets for Claude Code. While Claude Code cannot yet confirm which policy level the server assigns (a state it calls "unconfirmed"), it keeps only a fixed list of these settings and drops the rest. Three hook settings have been added to that list:
disableAllHooks: turns off hooks, which are commands that run automatically at set pointsallowedHttpHookUrls: limits which web addresses HTTP hooks can send tohttpHookAllowedEnvVars: limits which environment variables HTTP hooks can put in their headers
Before this change, all three were dropped in that state.
Why
Hook restrictions an administrator has set now stay in place even while Claude Code is still waiting to confirm the policy, instead of lapsing during that time.