What
Connectors on claude.ai link Claude to outside services and can download files. Claude Code now treats those files, and anything in a connector-downloads folder, more carefully:
- The Read tool, which Claude uses to open files, refuses them when your organization keeps connector data out of conversations that can reach the web.
- The Read tool also refuses them when sending to a session on another machine.
- Settings files inside a connector-downloads folder are not used, and a notice on stderr says so.
- Starting a cloud session from a connector-downloads folder fails, with advice to start from a folder outside it.
- Other reads of downloaded files get a note attached.
Why
This sets a new security boundary around files that came from connectors, so their contents do not leak into places your organization has kept them out of, and so a downloaded file cannot change how Claude Code is configured.