Claude Desktop

Forces users to sign in with the specified Anthropic organization. When set, Claude Desktop requires the user to authenticate with the matching organization UUID.

Disable automatic updates for Claude Desktop.

Hours before forcefully restarting Claude to apply a prepared update. Must be between 1 and 72 hours.

Enable or disable Claude Desktop extensions.

Enable or disable access to the extension directory.

Enable or disable local Model Context Protocol (MCP) servers.

Enable Claude code access in desktop.

Enable Cowork access in desktop

When true, Claude Desktop rejects extensions that aren't signed by a trusted publisher.

Removes the listed built-in tools from the available set in Claude Desktop. Known tools: Task, Bash, Glob, Grep, Read, Edit, Write, NotebookEdit, WebFetch, TodoWrite, WebSearch, Skill, REPL, JavaScript, AskUserQuestion. ToolSearch and SendUserMessage are also available under specific conditions.

Distributes remote MCP (Model Context Protocol) servers to users. Each entry requires a unique name and an HTTPS URL. Optional fields include transport, headers, OAuth, and tool-level policies. Used in Claude Cowork deployments on third-party platforms (Bedrock, Vertex AI, Azure AI Foundry, LLM gateways).

Name of a built-in tool to disable.

—

Unique name identifying this MCP server.

HTTPS URL of the remote MCP server.

Transport protocol used to reach the MCP server.

Static request headers used to authenticate to the MCP server (for example, Authorization). Mutually exclusive with the OAuth field.

When true, Claude Desktop runs a PKCE OAuth flow at first use to acquire user credentials. Mutually exclusive with the Headers field.

Maps tool names exposed by the MCP server to a policy. Allowed values per tool: allow, ask, blocked. The "ask" policy prompts the user to confirm before the tool runs.

—

—

—

—