Hooks, Plugins, and Skills Settings

These keys control hooks, plugins, marketplaces, skills, permissions, and the status line. Many are managed-only keys that let an administrator lock down what users can load. The hooks, permissions, and statusLine objects are large, so their own pages explain them.

Managed-only keys need a managed source. disableAllHooks, disableBundledSkills, and enabledPlugins are switches.

Keys

Source: Settings Reference for rows marked

Documented: An official docs page names this item.

. For rows marked

Undocumented: Only the program shows this item. It can change without notice.

, Source: the program (its bundled settings schema). Where to Set It tells you which files may set the key. See Settings Files and Scopes.

Key	Status	Type	Default	What It Does	Where to Set It
`additionalMarketplaces`	Documented: An official docs page names this item.	object	-	Write `extraKnownMarketplaces` under this alias name. Do not set both in one file. Needs Claude Code `2.1.232` or later. If both are set, Claude Code ignores the alias and warns.	Any settings file
`allowedHttpHookUrls`	Documented: An official docs page names this item.	array of string	-	Limit which URLs HTTP hooks can target.	Any settings file
`allowedMarketplaces`	Documented: An official docs page names this item. Managed Only: Works only in managed (organization policy) settings.	array	-	Write `strictKnownMarketplaces` under this alias name. Do not set both in one file. Needs Claude Code `2.1.232` or later.	Managed settings only
`allowManagedHooksOnly`	Documented: An official docs page names this item. Managed Only: Works only in managed (organization policy) settings.	boolean	-	Run only the hooks your organization deploys and the hooks of managed-enabled plugins. It also narrows `statusLine`, `fileSuggestion`, and `subagentStatusLine`. It also blocks hooks and mods that are not the organization's.	Managed settings only
`allowManagedPermissionRulesOnly`	Documented: An official docs page names this item. Managed Only: Works only in managed (organization policy) settings.	boolean	-	Make managed settings the only settings source of permission rules. Since `2.1.305`, plugins that Claude Desktop mounts by path no longer keep their `allowed-tools` when your organization's managed settings set it (v2.1.305 release).	Managed settings only
`appendPlugins`	Differs: The official docs and the program disagree. The row says how. Docs say user or managed scope. The schema says managed only. Managed Only: Works only in managed (organization policy) settings.	array of string	-	List managed plugins whose hooks run last, in the listed order. The docs list the scope as user or managed. The schema marks it managed-only. Listed ids run innermost.	User or managed settings
`blockedMarketplaces`	Documented: An official docs page names this item.	array	-	Block plugin marketplace sources for your organization. Claude Code checks it before download.	Managed settings only
`disableAllHooks`	Differs: The official docs and the program disagree. The row says how. The schema also says it stops the statusLine command. The Hooks Reference names only hooks.	boolean	-	Turn off hooks, a custom status line, and a custom `@` file suggestion command at once. Managed hooks stay unless you set it in managed settings. In managed settings it also stops organization mods. In user settings, what the organization manages keeps running. When `true` outside managed settings, only a managed `statusLine` runs. With no managed `statusLine`, the status line is off.	Any settings file
`disableAutoMode`	Documented: An official docs page names this item.	enum: `disable`	-	Remove auto mode from the permission mode cycle.	Any settings file
`disableBundledSkills`	Documented: An official docs page names this item.	boolean	-	Turn off the skills and workflows included with Claude Code.	Any settings file
`disableCommandPluginSources`	Documented: An official docs page names this item. Managed Only: Works only in managed (organization policy) settings.	boolean	-	Block plugins that install by running a marketplace-declared command. It turns off `command` plugin sources.	Managed settings only
`disableSideloadFlags`	Documented: An official docs page names this item. Managed Only: Works only in managed (organization policy) settings.	boolean	-	Reject the CLI flags that sideload plugins, subagents, and MCP servers. It covers `--plugin-dir`, `--plugin-url`, `--agents`, and `--mcp-config`.	Managed settings only
`disableSkillShellExecution`	Documented: An official docs page names this item.	boolean	-	Stop skills and custom commands from running inline shell.	Any settings file
`enabledPlugins`	Documented: An official docs page names this item.	object	-	Turn individual plugins on or off per scope. Keys look like `"name@marketplace"` with a value of `true` or `false`. The layers apply in this order: user, project, local, flag, policy. To turn off a project plugin for yourself, set `false` in `.claude/settings.local.json`. It also holds extended version-constraint forms.	Any settings file
`extraKnownMarketplaces`	Documented: An official docs page names this item.	object	-	Register marketplaces for a repository or an organization. The value is a map of name to `{ "source": ... }`. Project values apply after you trust the folder.	Any settings file
`hooks`	Documented: An official docs page names this item.	object	-	Run your own commands as hooks at points in Claude Code's lifecycle.	Any settings file
`httpHookAllowedEnvVars`	Documented: An official docs page names this item.	array of string	-	Limit which env vars HTTP hooks can put in headers.	Any settings file
`outputStyle`	Documented: An official docs page names this item.	string	-	Change Claude's role, tone, and output format with an output style.	Any settings file
`permissions`	Documented: An official docs page names this item.	object	-	Set allow, ask, and deny rules and the starting permission mode.	Any settings file
`pluginConfigs`	Documented: An official docs page names this item.	object	-	Store the answers you gave a plugin's configuration dialog. It holds `options` and `mcpServers` by plugin id.	User or managed settings
`pluginSuggestionMarketplaces`	Documented: An official docs page names this item.	array of string	-	Choose which marketplaces can surface plugin install suggestions in `/plugin`. Without it, no marketplace suggestion shows.	Managed settings only
`pluginTrustMessage`	Documented: An official docs page names this item. Managed Only: Works only in managed (organization policy) settings.	string	-	Add your own text to the plugin trust warning.	Managed settings only
`prependPlugins`	Differs: The official docs and the program disagree. The row says how. Docs say user or managed scope. The schema says managed only. Managed Only: Works only in managed (organization policy) settings.	array of string	-	List managed plugins whose hooks run first, in the listed order. The docs list the scope as user or managed. The schema marks it managed-only. Listed ids run outermost.	User or managed settings
`skillListingBudgetFraction`	Documented: An official docs page names this item.	number	`0.01` (1%)	Reserve more or less context for the skill listing.	Any settings file
`skillListingMaxDescChars`	Documented: An official docs page names this item.	integer	1536	Cap each skill's description length in the skill listing.	Any settings file
`skillOverrides`	Documented: An official docs page names this item.	object	-	Hide or collapse a skill without editing its SKILL.md.	Any settings file
`skipDangerousModePermissionPrompt`	Documented: An official docs page names this item. Caution: It deletes data, skips a safety check, or sends data off your machine.	boolean	-	Skip the confirmation dialog before bypassPermissions mode.	User, local, or managed settings
`statusLine`	Documented: An official docs page names this item.	object	-	Run your own command to render a status line below the prompt.	Any settings file
`strictKnownMarketplaces`	Documented: An official docs page names this item.	array	-	Allowlist the marketplace sources users can add and install from. Claude Code checks it before download. It does not register anything.	Managed settings only
`strictPluginOnlyCustomization`	Documented: An official docs page names this item. Managed Only: Works only in managed (organization policy) settings.	boolean or array of: `skills`, `agents`, `hooks`, `mcp`	-	Block skills, agents, hooks, and MCP servers from user and project sources. `true` locks all four. `false` locks nothing. Claude Code drops an unknown array entry with a warning. A value that is not valid acts as `true`. Managed sources and plugin items are not blocked. Source: the program.	Managed settings only
`syncClaudeAiPlugins`	Documented: An official docs page names this item.	boolean	-	Stop loading the plugins enabled on your claude.ai account and stop downloading new ones.	User, local, or managed settings
`syncClaudeAiSkills`	Documented: An official docs page names this item.	boolean	-	Stop loading the skills enabled on your claude.ai account and stop downloading new ones.	User, local, or managed settings

Example

Turn On a Plugin and a Hook

This file turns on one plugin. It runs echo done when a turn ends. It stops skills from running inline shell.

.claude/settings.json
{
  "enabledPlugins": { "my-plugin@my-marketplace": true },
  "hooks": {
    "Stop": [{ "hooks": [{ "type": "command", "command": "echo done" }] }]
  },
  "disableSkillShellExecution": true
}

Settings Files and Scopes explains the scopes, precedence, and managed settings.
Settings Reference is the official page for each key.
Hooks, Plugins, and Skills and Commands explain those features.
Permissions covers permissions.
Plugins and MCP Variables lists the matching variables.

Keys​

Example​

Turn On a Plugin and a Hook​

Related Pages​

Keys

Example

Turn On a Plugin and a Hook

Related Pages