disableCommandPluginSources
boolean記述場所管理者設定のみユーザーのマシン上でコマンドを実行してプラグインをインストールする command プラグイン ソースをブロックします。
既定値: unset, so Claude Code follows allowManagedHooksOnly: an organization that restricts hook execution to managed settings gets command sources disabled too
記述例
{
"disableCommandPluginSources": true
}使い方・用途
- デフォルト値は未設定
allowManagedHooksOnlyが true の場合、コマンド ソースも無効になりますheadersHelperコマンドもブロックされます（v2.1.238 以降）- v2.1.229 以降で利用可能
Block the [command plugin source](/docs/en/plugin-marketplaces#command-sources), which installs a plugin by running a marketplace-declared command on the user's machine. When you set it to true, Claude Code never runs the command, doesn't install or update command-sourced plugins, and stops loading the ones already installed. Set it to false to allow them explicitly. Whenever it blocks command sources, whether you set it to true or leave it unset under [allowManagedHooksOnly](#allowmanagedhooksonly), it also blocks marketplace [headersHelper commands](/docs/en/plugin-marketplaces#authenticate-archive-downloads), except for a marketplace that managed settings themselves declare. Requires Claude Code v2.1.229 or later, and the headersHelper block requires v2.1.238 or later.