disableSideloadFlags
起動時に --plugin-dir や --mcp-config などの CLI フラグを拒否し、ユーザーによる構成の上書きを禁止します。
使い方・用途
- 組織のセキュリティポリシーを強制する場合に使用します。
- strictKnownMarketplaces と組み合わせることで、プラグイン等のサイドロードを完全に防止します。
(Managed settings only) Reject the --plugin-dir, --plugin-url, --agents, and --mcp-config CLI flags at startup, which users could otherwise pass to bypass strictKnownMarketplaces for a single run. Also rejects these flags from any surface that spawns the CLI with them internally, currently Cowork local sessions in the desktop app. A --mcp-config whose servers are all in-process type: "sdk" entries is still accepted, so the Agent SDK and VS Code extension keep working. Does not block claude mcp add, .mcp.json, or SDK setMcpServers(); pair with allowedMcpServers for per-server MCP control. Requires Claude Code v2.1.193 or later. See https://code.claude.com/docs/en/settings#available-settings