An entry is only as true as the day it was written.
Flags move on the server after a release ships. Anthropic's own notes land days later and their documentation later still. Sometimes an entry turns out to be wrong and gets corrected by hand. All of that is recorded against the entry it happened to, and this is the whole of it in the order it happened.
Nothing here replaces an entry. Every line links to the page its release published, still saying what that release said, because a correction is added and dated rather than swapped in.
| When | Entry | What happened |
|---|---|---|
v2.1.242modelPicker |
Documentation arrivedAnthropic's documentation has since written up modelPicker, on All settings.
the line in the docs| Read from the highest-priority source only | Reads the key only from the highest-priority source that carries a policy key, so a lower source's value is ignored even when the highest source sets none | [`apiKeyHelper`](#apikeyhelper), [`… |
|
v2.1.242modelPicker |
Documentation arrivedAnthropic's documentation has since written up modelPicker, on All settings.
the line in the docs| Read from the highest-priority source only | Reads the key only from the highest-priority source that carries a policy key, so a lower source's value is ignored even when the highest source sets none | [`apiKeyHelper`](#apikeyhelper), [`… |
|
v2.1.257permissions.defaultMode |
Documentation arrivedAnthropic's documentation has since written up permissions.defaultMode, on All settings.
the line in the docs| Read from the highest-priority source only | Reads the key only from the highest-priority source that carries a policy key, so a lower source's value is ignored even when the highest source sets none | [`apiKeyHelper`](#apikeyhelper), [`… |
|
v2.1.257permissions.defaultMode |
Documentation arrivedAnthropic's documentation has since written up permissions.defaultMode, on All settings.
the line in the docs| Read from the highest-priority source only | Reads the key only from the highest-priority source that carries a policy key, so a lower source's value is ignored even when the highest source sets none | [`apiKeyHelper`](#apikeyhelper), [`… |
|
v2.1.238permissions.defaultMode |
Documentation arrivedAnthropic's documentation has since written up permissions.defaultMode, on All settings.
the line in the docs| Read from the highest-priority source only | Reads the key only from the highest-priority source that carries a policy key, so a lower source's value is ignored even when the highest source sets none | [`apiKeyHelper`](#apikeyhelper), [`… |
|
v2.1.232defaultMode |
Documentation arrivedAnthropic's documentation has since written up defaultMode, on All settings.
the line in the docs| Read from the highest-priority source only | Reads the key only from the highest-priority source that carries a policy key, so a lower source's value is ignored even when the highest source sets none | [`apiKeyHelper`](#apikeyhelper), [`… |
|
v2.1.268awsPairs |
Documentation arrivedAnthropic's documentation has since written up awsPairs, on All settings.
the line in the docs| Values taken whole | Takes the value whole from the highest source that sets it, without combining entries or fields from lower sources. When the highest source doesn't set it, takes it whole from the next source down | [`sandbox.credent… |
|
v2.1.257credentials.awsPairs |
Documentation arrivedAnthropic's documentation has since written up credentials.awsPairs, on All settings.
the line in the docs| Values taken whole | Takes the value whole from the highest source that sets it, without combining entries or fields from lower sources. When the highest source doesn't set it, takes it whole from the next source down | [`sandbox.credent… |
|
v2.1.257sandbox.credentials.awsPairs |
Documentation arrivedAnthropic's documentation has since written up sandbox.credentials.awsPairs, on All settings.
the line in the docs| Values taken whole | Takes the value whole from the highest source that sets it, without combining entries or fields from lower sources. When the highest source doesn't set it, takes it whole from the next source down | [`sandbox.credent… |
|
v2.1.246sandbox.credentials |
Documentation arrivedAnthropic's documentation has since written up sandbox.credentials, on All settings.
the line in the docs| Values taken whole | Takes the value whole from the highest source that sets it, without combining entries or fields from lower sources. When the highest source doesn't set it, takes it whole from the next source down | [`sandbox.credent… |
|
v2.1.257sandbox.ripgrep |
Documentation arrivedAnthropic's documentation has since written up sandbox.ripgrep, on All settings.
the line in the docs| Values taken whole | Takes the value whole from the highest source that sets it, without combining entries or fields from lower sources. When the highest source doesn't set it, takes it whole from the next source down | [`sandbox.credent… |
|
v2.1.257sandbox.ripgrep |
Documentation arrivedAnthropic's documentation has since written up sandbox.ripgrep, on All settings.
the line in the docs| Values taken whole | Takes the value whole from the highest source that sets it, without combining entries or fields from lower sources. When the highest source doesn't set it, takes it whole from the next source down | [`sandbox.credent… |
|
v2.1.232sandbox.ripgrep |
Documentation arrivedAnthropic's documentation has since written up sandbox.ripgrep, on All settings.
the line in the docs| Values taken whole | Takes the value whole from the highest source that sets it, without combining entries or fields from lower sources. When the highest source doesn't set it, takes it whole from the next source down | [`sandbox.credent… |
|
v2.1.232sandbox.ripgrep |
Documentation arrivedAnthropic's documentation has since written up sandbox.ripgrep, on All settings.
the line in the docs| Values taken whole | Takes the value whole from the highest source that sets it, without combining entries or fields from lower sources. When the highest source doesn't set it, takes it whole from the next source down | [`sandbox.credent… |
|
v2.1.267availableModels |
Documentation arrivedAnthropic's documentation has since written up availableModels, on All settings.
the line in the docs| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail… |
|
v2.1.257fallbackModel |
Documentation arrivedAnthropic's documentation has since written up fallbackModel, on All settings.
the line in the docs| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail… |
|
v2.1.268allowedMcpServers |
Documentation arrivedAnthropic's documentation has since written up allowedMcpServers, on All settings.
the line in the docs| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail… |
|
v2.1.259allowedMcpServers |
Documentation arrivedAnthropic's documentation has since written up allowedMcpServers, on All settings.
the line in the docs| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail… |
|
v2.1.257allowedMcpServers |
Documentation arrivedAnthropic's documentation has since written up allowedMcpServers, on All settings.
the line in the docs| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail… |
|
v2.1.248allowedMcpServers |
Documentation arrivedAnthropic's documentation has since written up allowedMcpServers, on All settings.
the line in the docs| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail… |
|
v2.1.242allowedMcpServers |
Documentation arrivedAnthropic's documentation has since written up allowedMcpServers, on All settings.
the line in the docs| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail… |
|
v2.1.242strictKnownMarketplaces |
Documentation arrivedAnthropic's documentation has since written up strictKnownMarketplaces, on All settings.
the line in the docs| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail… |
|
v2.1.232strictKnownMarketplaces |
Documentation arrivedAnthropic's documentation has since written up strictKnownMarketplaces, on All settings.
the line in the docs| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail… |
|
v2.1.232strictKnownMarketplaces |
Documentation arrivedAnthropic's documentation has since written up strictKnownMarketplaces, on All settings.
the line in the docs| Restriction allowlists | Takes the list whole from the highest source that sets it, without adding entries from lower sources. When the highest source doesn't set one, takes it whole from the next source down | [`availableModels`](#avail… |
|
v2.1.234disableBypassPermissionsMode |
Documentation arrivedAnthropic's documentation has since written up disableBypassPermissionsMode, on All settings.
the line in the docs| Locks | Applies the strictest value any source sets. When no source sets a strict value, applies a looser value only from the highest source | [`allowManagedPermissionRulesOnly`](#allowmanagedpermissionrulesonly), [`permissions.disableBy… |
|
v2.1.234disableBypassPermissionsMode |
Documentation arrivedAnthropic's documentation has since written up disableBypassPermissionsMode, on All settings.
the line in the docs| Locks | Applies the strictest value any source sets. When no source sets a strict value, applies a looser value only from the highest source | [`allowManagedPermissionRulesOnly`](#allowmanagedpermissionrulesonly), [`permissions.disableBy… |
|
v2.1.268permissions.allow |
Documentation arrivedAnthropic's documentation has since written up permissions.allow, on All settings.
the line in the docs| Lists | Combines entries from every source | [`permissions.allow`](#permissions-allow), [`sandbox.network.allowedDomains`](#sandbox-network-alloweddomains), and other list keys | |
|
v2.1.268allowedDomains |
Documentation arrivedAnthropic's documentation has since written up allowedDomains, on All settings.
the line in the docs| Lists | Combines entries from every source | [`permissions.allow`](#permissions-allow), [`sandbox.network.allowedDomains`](#sandbox-network-alloweddomains), and other list keys | |
|
v2.1.268allowedDomains |
Documentation arrivedAnthropic's documentation has since written up allowedDomains, on All settings.
the line in the docs| Lists | Combines entries from every source | [`permissions.allow`](#permissions-allow), [`sandbox.network.allowedDomains`](#sandbox-network-alloweddomains), and other list keys | |
|
v2.1.232sandbox.network.allowedDomains |
Documentation arrivedAnthropic's documentation has since written up sandbox.network.allowedDomains, on All settings.
the line in the docs| Lists | Combines entries from every source | [`permissions.allow`](#permissions-allow), [`sandbox.network.allowedDomains`](#sandbox-network-alloweddomains), and other list keys | |
|
v2.1.265managedSourcesBehavior |
Documentation arrivedA small documentation edit on Configure server-managed settings touched a line naming managedSourcesBehavior after this was published.
the line in the docs* **Gateway sign-in keys**: Claude Code never reads [`forceLoginGatewayUrl`](/docs/en/settings-reference#forcelogingatewayurl) or the `"gateway"` value of [`forceLoginMethod`](/docs/en/settings-reference#forceloginmethod) from server-manag… |
|
v2.1.248managedSourcesBehavior |
Documentation arrivedA small documentation edit on Configure server-managed settings touched a line naming managedSourcesBehavior after this was published.
the line in the docs* **Gateway sign-in keys**: Claude Code never reads [`forceLoginGatewayUrl`](/docs/en/settings-reference#forcelogingatewayurl) or the `"gateway"` value of [`forceLoginMethod`](/docs/en/settings-reference#forceloginmethod) from server-manag… |
|
v2.1.242managedSourcesBehavior |
Documentation arrivedA small documentation edit on Configure server-managed settings touched a line naming managedSourcesBehavior after this was published.
the line in the docs* **Gateway sign-in keys**: Claude Code never reads [`forceLoginGatewayUrl`](/docs/en/settings-reference#forcelogingatewayurl) or the `"gateway"` value of [`forceLoginMethod`](/docs/en/settings-reference#forceloginmethod) from server-manag… |
|
v2.1.265forceLoginGatewayUrl |
Documentation arrivedA small documentation edit on Deploy managed settings touched a line naming forceLoginGatewayUrl after this was published.
the line in the docsThe [gateway login keys](#choose-a-delivery-mechanism), [`forceLoginGatewayUrl`](/docs/en/settings-reference#forcelogingatewayurl) and the `"gateway"` value of [`forceLoginMethod`](/docs/en/settings-reference#forceloginmethod), follow a se… |
|
v2.1.247forceLoginGatewayUrl |
Documentation arrivedA small documentation edit on Deploy managed settings touched a line naming forceLoginGatewayUrl after this was published.
the line in the docsThe [gateway login keys](#choose-a-delivery-mechanism), [`forceLoginGatewayUrl`](/docs/en/settings-reference#forcelogingatewayurl) and the `"gateway"` value of [`forceLoginMethod`](/docs/en/settings-reference#forceloginmethod), follow a se… |
|
v2.1.247forceLoginMethod |
Documentation arrivedA small documentation edit on Deploy managed settings touched a line naming forceLoginMethod after this was published.
the line in the docsThe [gateway login keys](#choose-a-delivery-mechanism), [`forceLoginGatewayUrl`](/docs/en/settings-reference#forcelogingatewayurl) and the `"gateway"` value of [`forceLoginMethod`](/docs/en/settings-reference#forceloginmethod), follow a se… |
|
v2.1.247forceLoginMethod |
Documentation arrivedAnthropic's documentation has since written up forceLoginMethod, on Authentication.
the line in the docsDeploy the keys through your device management tooling. [Server-managed settings](/docs/en/server-managed-settings) reach only accounts that are already authenticated into your organization, so they can't redirect a developer's first login… |
|
v2.1.238sha256 |
Documentation arrivedAnthropic's documentation has since written up sha256, on Troubleshoot federated cloud access.
the line in the docs* **A large request to a service other than S3 with no content hash.** When a request has no `x-amz-content-sha256` header, Agent Proxy hashes the body before signing and refuses a body over 1 MB (1,048,576 bytes). The AWS CLI and SDKs add… |
|
v2.1.268required |
Documentation arrivedAnthropic's documentation has since written up required, on Authentication for connectors.
the line in the docs* **OAuth client ID** and **OAuth client secret**. You choose which of the two to ask for, and whether each is required or optional. |
|
v2.1.268tail |
Documentation arrivedAnthropic's documentation has since written up tail, on Authentication for connectors.
the line in the docs1. Client ID Metadata Document (CIMD). Every customer's authorization server must advertise both CIMD values listed in [DCR and CIMD details](#dcr-and-cimd-details). |
|
v2.1.257--restricted |
Documentation arrivedAnthropic's documentation has since written up --restricted, on Tools reference.
the line in the docs* A permissions [deny rule](/docs/en/permissions#match-all-uses-of-a-tool), the `--disallowedTools` flag, or [`--restricted`](/docs/en/cli-reference#cli-flags) removes `Bash` from the session. |
|
v2.1.248--restricted |
Documentation arrivedAnthropic's documentation has since written up --restricted, on Tools reference.
the line in the docs* A permissions [deny rule](/docs/en/permissions#match-all-uses-of-a-tool), the `--disallowedTools` flag, or [`--restricted`](/docs/en/cli-reference#cli-flags) removes `Bash` from the session. |
|
v2.1.248--restricted |
Documentation arrivedAnthropic's documentation has since written up --restricted, on Tools reference.
the line in the docs* A permissions [deny rule](/docs/en/permissions#match-all-uses-of-a-tool), the `--disallowedTools` flag, or [`--restricted`](/docs/en/cli-reference#cli-flags) removes `Bash` from the session. |
|
v2.1.248--restricted |
Documentation arrivedAnthropic's documentation has since written up --restricted, on Tools reference.
the line in the docs* A permissions [deny rule](/docs/en/permissions#match-all-uses-of-a-tool), the `--disallowedTools` flag, or [`--restricted`](/docs/en/cli-reference#cli-flags) removes `Bash` from the session. |
|
v2.1.248--restricted |
Documentation arrivedAnthropic's documentation has since written up --restricted, on Tools reference.
the line in the docs* A permissions [deny rule](/docs/en/permissions#match-all-uses-of-a-tool), the `--disallowedTools` flag, or [`--restricted`](/docs/en/cli-reference#cli-flags) removes `Bash` from the session. |
|
v2.1.248--restricted |
Documentation arrivedAnthropic's documentation has since written up --restricted, on Tools reference.
the line in the docs* A permissions [deny rule](/docs/en/permissions#match-all-uses-of-a-tool), the `--disallowedTools` flag, or [`--restricted`](/docs/en/cli-reference#cli-flags) removes `Bash` from the session. |
|
v2.1.248--restricted |
Documentation arrivedAnthropic's documentation has since written up --restricted, on Tools reference.
the line in the docs* A permissions [deny rule](/docs/en/permissions#match-all-uses-of-a-tool), the `--disallowedTools` flag, or [`--restricted`](/docs/en/cli-reference#cli-flags) removes `Bash` from the session. |
|
v2.1.248--restricted |
Documentation arrivedAnthropic's documentation has since written up --restricted, on Tools reference.
the line in the docs* A permissions [deny rule](/docs/en/permissions#match-all-uses-of-a-tool), the `--disallowedTools` flag, or [`--restricted`](/docs/en/cli-reference#cli-flags) removes `Bash` from the session. |
|
v2.1.248--restricted |
Documentation arrivedAnthropic's documentation has since written up --restricted, on Tools reference.
the line in the docs* A permissions [deny rule](/docs/en/permissions#match-all-uses-of-a-tool), the `--disallowedTools` flag, or [`--restricted`](/docs/en/cli-reference#cli-flags) removes `Bash` from the session. |
|
v2.1.248--restricted |
Documentation arrivedAnthropic's documentation has since written up --restricted, on Tools reference.
the line in the docs* A permissions [deny rule](/docs/en/permissions#match-all-uses-of-a-tool), the `--disallowedTools` flag, or [`--restricted`](/docs/en/cli-reference#cli-flags) removes `Bash` from the session. |