Unclear Whether Gmail attachments are switched on when the server sends nothing is not known.
What
Connectors are claude.ai integrations, such as Gmail or Google Drive, that Claude can use through MCP, a standard way of plugging tools into Claude. The Gmail connector can now attach files from your computer to drafts and messages. It does this with file references written as sha256:<hash>:<path>.
- Each attachment asks for your approval, even if you already allowed the tool.
- Each file is limited to 10 MB, the total to 23 MB, and there can be at most 10 attachments.
- It covers
create_draft,update_draft,reply,forwardandsend_message. - Google Drive file references now carry a
descriptionHint.
Two new organisation policy settings control this kind of file sending:
allow_connector_file_uploads, labelled "Sending files to claude.ai connectors", is denied under HIPAA and ZDR (zero data retention) compliance modes.allow_gmail_file_references, labelled "File references for connectors", is denied under HIPAA.
Both are also denied when the policy cannot be looked up or the check would otherwise let the request through by default. Under those compliance modes the features are blocked unless the policy allows them.
Why
You can have Claude attach a local file to an email it is drafting, and you approve each file before it goes. Organisations under HIPAA or ZDR rules lose file sending to connectors unless their policy explicitly allows it.
tengu_snug_pine Off in both readingsThe flag server returned off for the account this site reads and for the anonymous baseline. A reading of off cannot rule out a rollout these two readings sit outside of.
This account: off · anonymous baseline: off · compiled default in v2.1.317: not a boolean we can read
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
tengu_clever_bonbon Off in both readingsThe flag server returned off for the account this site reads and for the anonymous baseline. A reading of off cannot rule out a rollout these two readings sit outside of.
This account: off · anonymous baseline: off · compiled default in v2.1.317: not a boolean we can read
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
Read once, for one account on one subscription tier, against v2.1.317. It isn't a statement about your account. What a flag value here can and cannot tell you
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
Whether Gmail attachments are switched on when the server sends nothing is not known.