Enterprise Settings

These keys let an administrator control how managed settings arrive and which versions may run. They work in managed settings. For the places managed settings can come from, see the managed settings section of the index page.

Only use these keys if you manage a machine or organization. forceRemoteSettingsRefresh and wslInheritsWindowsSettings are switches.

Keys

Source: Settings Reference for rows marked

Documented: An official docs page names this item.

. For rows marked

Undocumented: Only the program shows this item. It can change without notice.

, Source: the program (its bundled settings schema). Where to Set It tells you which files may set the key. See Settings Files and Scopes.

Key	Status	Type	Default	What It Does	Where to Set It
forceRemoteSettingsRefresh	Documented: An official docs page names this item. Managed Only: Works only in managed (organization policy) settings.	boolean	-	Block startup until Claude Code freshly fetches server-managed settings. Claude Code exits if the fetch fails.	Managed settings only
managedSourcesBehavior	Documented: An official docs page names this item.	enum: first-wins, merge	-	Compose every managed source you deploy instead of using the highest-priority one alone. first-wins (the default) uses the highest source alone. merge combines them.	Managed settings only
parentSettingsBehavior	Documented: An official docs page names this item.	enum: first-wins, merge	-	Apply or drop restrictions an SDK or IDE host passes when you deploy managed settings. first-wins drops the parent tier. merge unions it in.	Managed settings only
policyHelper	Documented: An official docs page names this item. Managed Only: Works only in managed (organization policy) settings.	object: path, timeoutMs, refreshIntervalMs	-	Run an executable that computes managed settings at startup. Claude Code honors it only from admin-controlled policy sources. timeoutMs is at least 1000. refreshIntervalMs is 0 or at least 60000. A path of null counts as unset. Source: the program.	Managed settings only
policyHelpers	Undocumented: Only the program shows this item. It can change without notice.	object: macos, linux, windows, wsl, default	-	Give each platform its own policy helper or static payload (defaultSettings). default is a static payload. WSL tries its own entry, then linux. The first helper on the platform chain wins over policyHelper. If none runs, the first static payload applies, then default, then policyHelper. The program marks the key @internal.	Settings files
requiredMaximumVersion	Documented: An official docs page names this item. Managed Only: Works only in managed (organization policy) settings.	string	-	Refuse to start on a version newer than your organization allows. Claude Code exits at startup with install steps. This key works in managed settings only.	Managed settings only
requiredMinimumVersion	Documented: An official docs page names this item. Managed Only: Works only in managed (organization policy) settings.	string	-	Refuse to start on a version older than your organization requires. Claude Code exits at startup with update steps. This key works in managed settings only.	Managed settings only
wslInheritsWindowsSettings	Documented: An official docs page names this item.	boolean	-	Have WSL read managed settings from the Windows policy chain. Set it in an admin-only Windows source. It has no effect on native Windows.	Managed settings only

Example

Require a Version Range

This file stops versions older than 2.1.300 from starting and merges all managed sources instead of using the top one alone.

/etc/claude-code/managed-settings.json

{
  "requiredMinimumVersion": "2.1.300",
  "managedSourcesBehavior": "merge"
}

Related Pages

• Settings Files and Scopes explains the scopes, precedence, and managed settings.
• Settings Reference is the official page for each key.
• Deploy Managed Settings is the guide for administrators.