Claude Desktop

Require login to belong to a specific organization. Accepts a single UUID string, which also pre-selects that organization during login, or an array of UUIDs where any listed organization is accepted without pre-selection. Login fails if the authenticated account does not belong to a listed organization.

Disable automatic updates for Claude Desktop.

Default: false

Hours before forcefully restarting Claude to apply a prepared update. Must be between 1 and 72 hours.

Default: 72

Range: 1 – 72

Read the update feed from releases.claude.com so api.anthropic.com can stay blocked. Defaults to false.

Default: false

Hours a user may keep working on the old configuration after a managed-configuration change is detected. 0 = restart required at once. Blank = 24 hours. Defaults to 24. Range: 0-336.

Default: 24

Range: 0 – 336

Minutes between the running app's checks for a changed managed configuration. Blank = 10 minutes. Defaults to 10. Range: 2-30.

Default: 10

Range: 2 – 30

Enable or disable Claude Desktop extensions.

Default: true

Enable or disable access to the extension directory.

Default: true

Enable or disable local Model Context Protocol (MCP) servers.

Default: true

Enable Claude code access in desktop.

Default: true

Enable Cowork access in desktop

Default: true

Enable Cowork. Claude works on longer tasks like research, analysis, and documents. Defaults to true.

Default: true

Claude Desktop on third-party inference deployments. Enable the built-in browser in Cowork and Code sessions. False disables the browser pane; Code retains its localhost-only dev-server preview. Defaults to false. When bootstrapUrl is set, configure this key in the served configuration.

Default: false

Claude Desktop on third-party inference deployments. Default policy for sites Claude may open, read, or act on when the built-in browser is enabled. Allowed domains are exceptions under block; blocked domains are exceptions under allow. Users can still view sites denied to Claude. Defaults to allow.

Default: "allow"

Range: Allow Sites by Default (allow), Block Sites by Default (block)

Claude Desktop on third-party inference deployments. Sites Claude may open, read, or act on when builtinBrowserDefaultDomainPolicy is block; ignored under allow. Empty or unset allows no external sites for Claude. Users can still view other sites. Bare * and public-suffix wildcards are ignored.

A hostname or supported hostname wildcard. A plain hostname also matches its www form, but no other subdomain.

Claude Desktop on third-party inference deployments. Sites Claude may not open, read, or act on when builtinBrowserDefaultDomainPolicy is allow; ignored under block. Empty or unset adds no blocked sites. Users can still view blocked sites. * blocks every external site for Claude; localhost dev servers are unaffected.

A hostname or supported hostname wildcard. A plain hostname also matches its www form, but no other subdomain.

Set to “disabled” to force browser-based Microsoft 365 sign-in instead of the native Company Portal / Windows account broker. One of: auto, disabled. Defaults to auto.

Default: "auto"

Range: Auto (auto), Disabled (disabled)

When true, Claude Desktop rejects extensions that aren't signed by a trusted publisher.

Default: false

Removes the listed built-in tools from the available set in Claude Desktop. Known tools: Task, Bash, Glob, Grep, Read, Edit, Write, NotebookEdit, WebFetch, TodoWrite, WebSearch, Skill, REPL, JavaScript, AskUserQuestion. ToolSearch and SendUserMessage are also available under specific conditions.

Name of a built-in tool to disable.

Distributes remote MCP (Model Context Protocol) servers to users. Each entry requires a unique name and an HTTPS URL. Optional fields include transport, headers, OAuth, and tool-level policies. Used in Claude Cowork deployments on third-party platforms (Bedrock, Vertex AI, Azure AI Foundry, LLM gateways).

Unique name identifying this MCP server.

HTTPS URL of the remote MCP server.

Transport protocol used to reach the MCP server.

Default: "http"

Range: HTTP (http), SSE (sse)

Static request headers used to authenticate to the MCP server (for example, Authorization). Mutually exclusive with the OAuth field.

When true, Claude Desktop runs a PKCE OAuth flow at first use to acquire user credentials. Mutually exclusive with the Headers field.

Default: false

Maps tool names exposed by the MCP server to a policy. Allowed values per tool: allow, ask, blocked. The "ask" policy prompts the user to confirm before the tool runs.

Range: Allow (allow), Ask (ask), Block (blocked)

Offer the persistent “Always allow” approval options for MCP tools. Disable to keep tool approvals per-call or session-scoped only. Defaults to true.

Default: true

Per-call timeout for MCP tool calls, in seconds. Default 180 (3 minutes). Range: 60-3600.

Default: 180

Range: 60 – 3600

A UUID you generate. Tags telemetry so Anthropic support can locate your fleet's events, and namespaces each user's local data. Not used for auth.

Crash and performance reports to Anthropic. Defaults to false.

Default: false

Product-usage analytics and diagnostic-report uploads. No message content. Defaults to false.

Default: false

Connector favicons and the artifact-preview and MCP Apps widget iframe origins. Artifacts will not render. Defaults to false.

Default: false

Sets the default effort level for Claude Code sessions in Claude Desktop.

Default: "high"

Range: Low (low), Medium (medium), High (high), Extra High (xhigh), Max (max)

Folders where Claude may work. Applies to both Cowork and Code sessions. Leave unset for unrestricted access. Paths can reference ~ and these environment variables, expanded per user: %OneDrive%, %OneDriveCommercial%, %OneDriveConsumer%, %APPDATA%, %LOCALAPPDATA%, %USERNAME%, %XDG_DOCUMENTS_DIR%. The set is fixed; an entry that references any other %VAR%, or one that is unset on the device, is ignored.

Absolute folder path. May start with ~ or one of the listed %VAR% tokens, expanded per user. Subfolders are included.

Shows as a folder chip on the new-task page and skips the trust prompt. Users can remove it.

Default: false

Read-only folders can be viewed and searched but not modified in Cowork. In Code, applies to file tools only; Bash and SSH do not yet enforce read-only. One of: rw, ro.

Range: Read/write (rw), Read only (ro)

Remove the bypass permissions mode from Code sessions and Cowork tasks, so Claude always follows the permission policy. Off by default.

Default: false

Keep Claude from reading files outside a Code session's working directories. File tools refuse such reads; sandboxed shell commands lose the home directory.

Default: false

Users see only this provider at the login screen. The option to sign in to Claude.ai is hidden. Defaults to false.

Default: false

Stop external apps and websites from opening Claude Desktop via claude:// links. Defaults to false.

Default: false

Enable Chat. Quick questions and drafting.

Default: true

Allow Claude to run code in a local sandbox to analyze attached files it can't read natively — like Excel and PowerPoint. Off by default.

Default: false

Per-user soft cap, counted client-side over the token cap window. Not a server-enforced quota. Requires inferenceTokenWindowHours to also be set — without a window length the cap is inert and no limit is enforced.

Tumbling window length for the token cap. Max 720 hours (30 days). Range: 1-720. Required when inferenceMaxTokensPerWindow is set — the cap only takes effect once both are configured.

Range: 1 – 720

Show the signed-in user's identity-provider identity in the sidebar and account menu, and emit it as the OpenTelemetry enduser.id resource attribute.

Default: false

Overrides the provider label shown in the sidebar footer, user-menu header, and connection-error banner.

Optional detail shown after the deployment display name in the account-menu header.

Don't show users the in-app warning that this configuration uses a deprecated field. The final reminder in the 24 hours before the cut-off still appears.

Default: false

A persistent banner across the top of the app window after sign-in.

Turns the banner on or off.

Default: false

Text shown in the banner.

Banner background color, as a hex code.

Banner text color, as a hex code.

URL the banner links to when clicked.

Suppress unprompted feature-announcement UI: the post-update “What's new” nudge and new-feature tips. Users can still open release notes themselves. Defaults to false.

Default: false

Lets users import Claude.ai chats and projects, plus earlier Claude sessions on this computer, when enabled is true. automatic3pImport is a separate switch.

Turns history import on. The banner and import actions stay off until this is true.

Default: false

Lets users export Claude.ai chats and projects. automatic3pImport is a separate switch.

Default: false

When the import banner appears.

Default: "off"

Range: Off (off), Detect (detect), Show (show)

Where OpenTelemetry logs and metrics are sent. Leave blank to disable.

grpc or http/protobuf. One of: http/protobuf, http/json, grpc. Defaults to http/protobuf.

Default: "http/protobuf"

Range: http/protobuf, http/json, grpc

Static collector headers — routing and tenant headers only. No credentials here; use Collector authentication or the headers helper script for tokens.

inference-credential sends the user's inference bearer token to the collector as Authorization: Bearer. One of: none, inference-credential.

Range: None (none), Inference Credential (inference-credential)

Absolute path to an executable that prints a JSON object of collector headers. Merged over the static headers and Collector authentication; the helper wins.

Extra resource attributes to attach to every span/metric. A static enduser.id set here always wins over the runtime identity.

Controls the Claude Desktop application's events, separate from Cowork and Code sessions. Defaults to error. One of: off, error, warn, info, debug. Defaults to error.

Default: "error"

Range: Off (off), Error (error), Warn (warn), Info (info), Debug (debug)

Content categories the desktop exporter sends unredacted to your collector. Leave empty to redact all content (default). One of: userPrompts, assistantResponses, toolDetails, toolContent, rawApiBodies.

Name of a content capture category to enable a class of raw content in OpenTelemetry events sent to your collector (this data never reaches Anthropic)

Also export OpenTelemetry traces from Cowork tasks and Code sessions. Uses Claude Code's session tracing.

Default: false