Claude Desktop

com.anthropic.claudefordesktop

Claude Desktop enterprise configuration settings

macOS

Configuration Keys (52)

Showing 52 of 52 keys

Key	Type	Description	Default	Range
`forceLoginOrgUUID`array Force Login Organization UUID(s)	array	Require login to belong to a specific organization. Accepts a single UUID string, which also pre-selects that organization during login, or an array of UUIDs where any listed organization is accepted without pre-selection. Login fails if the authenticated account does not belong to a listed organization.	Default: —	Range: —
string Organization UUID	string	—	Default: —	Range: —
`disableAutoUpdates`boolean Disable Auto Updates	boolean	Disable automatic updates for Claude Desktop.	Default: false	Range: —
`autoUpdaterEnforcementHours`integer Auto Update Enforcement Hours	integer	Hours before forcefully restarting Claude to apply a prepared update. Must be between 1 and 72 hours.	Default: 72	Range: 1 – 72
`updateViaUpdatesHost`boolean Check for updates on releases.claude.com	boolean	Read the update feed from releases.claude.com so api.anthropic.com can stay blocked. Defaults to false.	Default: false	Range: —
`relaunchEnforcementHours`integer Configuration relaunch window	integer	Hours a user may keep working on the old configuration after a managed-configuration change is detected. 0 = restart required at once. Blank = 24 hours. Defaults to 24. Range: 0-336.	Default: 24	Range: 0 – 336
`configRecheckIntervalMinutes`integer Configuration re-check interval	integer	Minutes between the running app's checks for a changed managed configuration. Blank = 10 minutes. Defaults to 10. Range: 2-30.	Default: 10	Range: 2 – 30
`isDesktopExtensionEnabled`boolean Enable Desktop Extensions	boolean	Enable or disable Claude Desktop extensions.	Default: true	Range: —
`isDesktopExtensionDirectoryEnabled`boolean Enable Extension Directory	boolean	Enable or disable access to the extension directory.	Default: true	Range: —
`isLocalDevMcpEnabled`boolean Enable Local MCP Servers	boolean	Enable or disable local Model Context Protocol (MCP) servers.	Default: true	Range: —
`isClaudeCodeForDesktopEnabled`boolean Enable Claude Code for Desktop	boolean	Enable Claude code access in desktop.	Default: true	Range: —
`secureVmFeaturesEnabled`boolean Enable Secure VM Features	boolean	Enable Cowork access in desktop	Default: true	Range: —
`coworkTabEnabled`boolean Allow Cowork	boolean	Enable Cowork. Claude works on longer tasks like research, analysis, and documents. Defaults to true.	Default: true	Range: —
`builtinBrowserEnabled`boolean Enable Built-in Browser	boolean	Claude Desktop on third-party inference deployments. Enable the built-in browser in Cowork and Code sessions. False disables the browser pane; Code retains its localhost-only dev-server preview. Defaults to false. When bootstrapUrl is set, configure this key in the served configuration.	Default: false	Range: —
`builtinBrowserDefaultDomainPolicy`string Built-in Browser Default Site Policy	string	Claude Desktop on third-party inference deployments. Default policy for sites Claude may open, read, or act on when the built-in browser is enabled. Allowed domains are exceptions under block; blocked domains are exceptions under allow. Users can still view sites denied to Claude. Defaults to allow.	Default: "allow"	Range: Allow Sites by Default (allow), Block Sites by Default (block)
`builtinBrowserAllowedDomains`array Built-in Browser Allowed Domains	array	Claude Desktop on third-party inference deployments. Sites Claude may open, read, or act on when builtinBrowserDefaultDomainPolicy is block; ignored under allow. Empty or unset allows no external sites for Claude. Users can still view other sites. Bare * and public-suffix wildcards are ignored.	Default: —	Range: —
string Domain	string	A hostname or supported hostname wildcard. A plain hostname also matches its www form, but no other subdomain.	Default: —	Range: —
`builtinBrowserBlockedDomains`array Built-in Browser Blocked Domains	array	Claude Desktop on third-party inference deployments. Sites Claude may not open, read, or act on when builtinBrowserDefaultDomainPolicy is allow; ignored under block. Empty or unset adds no blocked sites. Users can still view blocked sites. * blocks every external site for Claude; localhost dev servers are unaffected.	Default: —	Range: —
string Domain	string	A hostname or supported hostname wildcard. A plain hostname also matches its www form, but no other subdomain.	Default: —	Range: —
`microsoftAuthBroker`string Microsoft 365 native sign-in broker	string	Set to “disabled” to force browser-based Microsoft 365 sign-in instead of the native Company Portal / Windows account broker. One of: auto, disabled. Defaults to auto.	Default: "auto"	Range: Auto (auto), Disabled (disabled)
`isDesktopExtensionSignatureRequired`boolean Require Signed Desktop Extensions	boolean	When true, Claude Desktop rejects extensions that aren't signed by a trusted publisher.	Default: false	Range: —
`disabledBuiltinTools`array Disabled Built-in Tools	array	Removes the listed built-in tools from the available set in Claude Desktop. Known tools: Task, Bash, Glob, Grep, Read, Edit, Write, NotebookEdit, WebFetch, TodoWrite, WebSearch, Skill, REPL, JavaScript, AskUserQuestion. ToolSearch and SendUserMessage are also available under specific conditions.	Default: —	Range: —
`disabledBuiltinToolsItem`string Tool	string	Name of a built-in tool to disable.	Default: —	Range: —
`managedMcpServers`array Managed MCP Servers	array	Distributes remote MCP (Model Context Protocol) servers to users. Each entry requires a unique name and an HTTPS URL. Optional fields include transport, headers, OAuth, and tool-level policies. Used in Claude Cowork deployments on third-party platforms (Bedrock, Vertex AI, Azure AI Foundry, LLM gateways).	Default: —	Range: —
`managedMcpServersItem`dict Managed MCP Server	dict	—	Default: —	Range: —
`name`string Name required	string	Unique name identifying this MCP server.	Default: —	Range: —
`url`string URL required	string	HTTPS URL of the remote MCP server.	Default: —	Range: —
`transport`string Transport	string	Transport protocol used to reach the MCP server.	Default: "http"	Range: HTTP (http), SSE (sse)
`headers`dict Headers	dict	Static request headers used to authenticate to the MCP server (for example, Authorization). Mutually exclusive with the OAuth field.	Default: —	Range: —
`{{key}}`string Header Name	string	—	Default: —	Range: —
`{{value}}`string Header Value	string	—	Default: —	Range: —
`oauth`boolean OAuth	boolean	When true, Claude Desktop runs a PKCE OAuth flow at first use to acquire user credentials. Mutually exclusive with the Headers field.	Default: false	Range: —
`toolPolicy`dict Tool Policy	dict	Maps tool names exposed by the MCP server to a policy. Allowed values per tool: allow, ask, blocked. The "ask" policy prompts the user to confirm before the tool runs.	Default: —	Range: —
`{{key}}`string Tool Name	string	—	Default: —	Range: —
`{{value}}`string Policy	string	—	Default: —	Range: Allow (allow), Ask (ask), Block (blocked)
`mcpPersistentAlwaysAllowEnabled`boolean Allow persistent tool approvals	boolean	Offer the persistent “Always allow” approval options for MCP tools. Disable to keep tool approvals per-call or session-scoped only. Defaults to true.	Default: true	Range: —
`mcpToolTimeoutSec`integer MCP tool call timeout	integer	Per-call timeout for MCP tool calls, in seconds. Default 180 (3 minutes). Range: 60-3600.	Default: 180	Range: 60 – 3600
`deploymentOrganizationUuid`string Organization UUID	string	A UUID you generate. Tags telemetry so Anthropic support can locate your fleet's events, and namespaces each user's local data. Not used for auth.	Default: —	Range: —
`disableEssentialTelemetry`boolean Block essential telemetry	boolean	Crash and performance reports to Anthropic. Defaults to false.	Default: false	Range: —
`disableNonessentialTelemetry`boolean Block nonessential telemetry	boolean	Product-usage analytics and diagnostic-report uploads. No message content. Defaults to false.	Default: false	Range: —
`disableNonessentialServices`boolean Block nonessential services	boolean	Connector favicons and the artifact-preview and MCP Apps widget iframe origins. Artifacts will not render. Defaults to false.	Default: false	Range: —
`effortLevel`string Effort Level	string	Sets the default effort level for Claude Code sessions in Claude Desktop.	Default: "high"	Range: Low (low), Medium (medium), High (high), Extra High (xhigh), Max (max)
`allowedWorkspaceFolders`array Allowed Workspace Folders	array	Folders where Claude may work. Applies to both Cowork and Code sessions. Leave unset for unrestricted access. Paths can reference ~ and these environment variables, expanded per user: %OneDrive%, %OneDriveCommercial%, %OneDriveConsumer%, %APPDATA%, %LOCALAPPDATA%, %USERNAME%, %XDG_DOCUMENTS_DIR%. The set is fixed; an entry that references any other %VAR%, or one that is unset on the device, is ignored.	Default: —	Range: —
`AllowedWorkspaceFolderItem`dict	dict	—	Default: —	Range: —
`path`string Path	string	Absolute folder path. May start with ~ or one of the listed %VAR% tokens, expanded per user. Subfolders are included.	Default: —	Range: —
`isDefaultSelected`boolean Select Default	boolean	Shows as a folder chip on the new-task page and skips the trust prompt. Users can remove it.	Default: false	Range: —
`mode`string Mode	string	Read-only folders can be viewed and searched but not modified in Cowork. In Code, applies to file tools only; Bash and SSH do not yet enforce read-only. One of: rw, ro.	Default: —	Range: Read/write (rw), Read only (ro)
`disableBypassPermissionsMode`boolean Disable bypass permissions mode	boolean	Remove the bypass permissions mode from Code sessions and Cowork tasks, so Claude always follows the permission policy. Off by default.	Default: false	Range: —
`blockReadsOutsideWorkingDirectories`boolean Block reads outside working directories	boolean	Keep Claude from reading files outside a Code session's working directories. File tools refuse such reads; sandboxed shell commands lose the home directory.	Default: false	Range: —
`disableDeploymentModeChooser`boolean Disable Claude.ai sign-in	boolean	Users see only this provider at the login screen. The option to sign in to Claude.ai is hidden. Defaults to false.	Default: false	Range: —
`disableDeepLinkRegistration`boolean Disable claude:// deep-link handling	boolean	Stop external apps and websites from opening Claude Desktop via claude:// links. Defaults to false.	Default: false	Range: —
`chatTabEnabled`boolean Allow Chat	boolean	Enable Chat. Quick questions and drafting.	Default: true	Range: —
`chatAdvancedFileAnalysisEnabled`boolean Advanced file analysis	boolean	Allow Claude to run code in a local sandbox to analyze attached files it can't read natively — like Excel and PowerPoint. Off by default.	Default: false	Range: —
`inferenceMaxTokensPerWindow`integer Max tokens per window	integer	Per-user soft cap, counted client-side over the token cap window. Not a server-enforced quota. Requires inferenceTokenWindowHours to also be set — without a window length the cap is inert and no limit is enforced.	Default: —	Range: —
`inferenceTokenWindowHours`integer Token cap window	integer	Tumbling window length for the token cap. Max 720 hours (30 days). Range: 1-720. Required when inferenceMaxTokensPerWindow is set — the cap only takes effect once both are configured.	Default: —	Range: 1 – 720
`endUserAttribution`boolean End-user attribution	boolean	Show the signed-in user's identity-provider identity in the sidebar and account menu, and emit it as the OpenTelemetry enduser.id resource attribute.	Default: false	Range: —
`deploymentDisplayName`string Deployment display name	string	Overrides the provider label shown in the sidebar footer, user-menu header, and connection-error banner.	Default: —	Range: —
`deploymentDisplaySubtitle`string Deployment display subtitle	string	Optional detail shown after the deployment display name in the account-menu header.	Default: —	Range: —
`disableConfigDeprecationWarnings`boolean Hide configuration deprecation warnings	boolean	Don't show users the in-app warning that this configuration uses a deprecated field. The final reminder in the 24 hours before the cut-off still appears.	Default: false	Range: —
`banner`dict Organization banner	dict	A persistent banner across the top of the app window after sign-in.	Default: —	Range: —
`enabled`boolean Enabled	boolean	Turns the banner on or off.	Default: false	Range: —
`text`string Text	string	Text shown in the banner.	Default: —	Range: —
`backgroundColor`string Background color	string	Banner background color, as a hex code.	Default: —	Range: —
`textColor`string Text color	string	Banner text color, as a hex code.	Default: —	Range: —
`linkUrl`string Link URL	string	URL the banner links to when clicked.	Default: —	Range: —
`disableFeatureDiscovery`boolean Hide feature announcements	boolean	Suppress unprompted feature-announcement UI: the post-update “What's new” nudge and new-feature tips. Users can still open release notes themselves. Defaults to false.	Default: false	Range: —
`claudeAiImport`dict Claude.ai data import	dict	Lets users import Claude.ai chats and projects, plus earlier Claude sessions on this computer, when enabled is true. automatic3pImport is a separate switch.	Default: —	Range: —
`enabled`boolean Enabled	boolean	Turns history import on. The banner and import actions stay off until this is true.	Default: false	Range: —
`exportEnabled`boolean Export enabled	boolean	Lets users export Claude.ai chats and projects. automatic3pImport is a separate switch.	Default: false	Range: —
`bannerBehavior`string Banner behavior	string	When the import banner appears.	Default: "off"	Range: Off (off), Detect (detect), Show (show)
`otlpEndpoint`string OpenTelemetry collector endpoint	string	Where OpenTelemetry logs and metrics are sent. Leave blank to disable.	Default: —	Range: —
`otlpProtocol`string OpenTelemetry exporter protocol	string	grpc or http/protobuf. One of: http/protobuf, http/json, grpc. Defaults to http/protobuf.	Default: "http/protobuf"	Range: http/protobuf, http/json, grpc
`otlpHeaders`string OpenTelemetry exporter headers	string	Static collector headers — routing and tenant headers only. No credentials here; use Collector authentication or the headers helper script for tokens.	Default: —	Range: —
`otlpAuthMode`string Collector authentication	string	inference-credential sends the user's inference bearer token to the collector as Authorization: Bearer. One of: none, inference-credential.	Default: —	Range: None (none), Inference Credential (inference-credential)
`otlpHeadersHelper`string OpenTelemetry headers helper script	string	Absolute path to an executable that prints a JSON object of collector headers. Merged over the static headers and Collector authentication; the helper wins.	Default: —	Range: —
`otlpResourceAttributes`string OpenTelemetry resource attributes	string	Extra resource attributes to attach to every span/metric. A static enduser.id set here always wins over the runtime identity.	Default: —	Range: —
`otlpDesktopLogLevel`string Desktop telemetry export level	string	Controls the Claude Desktop application's events, separate from Cowork and Code sessions. Defaults to error. One of: off, error, warn, info, debug. Defaults to error.	Default: "error"	Range: Off (off), Error (error), Warn (warn), Info (info), Debug (debug)
`otlpContentCapture`array Content capture categories	array	Content categories the desktop exporter sends unredacted to your collector. Leave empty to redact all content (default). One of: userPrompts, assistantResponses, toolDetails, toolContent, rawApiBodies.	Default: —	Range: —
`otlpContentCaptureItem`string Content capture category	string	Name of a content capture category to enable a class of raw content in OpenTelemetry events sent to your collector (this data never reaches Anthropic)	Default: —	Range: —
`otlpTracesEnabled`boolean Export traces	boolean	Also export OpenTelemetry traces from Cowork tasks and Code sessions. Uses Claude Code's session tracing.	Default: false	Range: —