Install and configure Claude Cowork with third-party platforms

Key

Type

Description

inferenceProvider

string

Selects the inference backend. Setting this key activates the third-party platform mode. Values: bedrock, vertex, foundry, gateway.

inferenceGatewayBaseUrl

string

Gateway base URL. Required when provider = gateway.

inferenceGatewayApiKey

string

API key for the gateway. Required when provider = gateway.

inferenceGatewayAuthScheme

string

How the gateway credential is sent (auto / x-api-key / bearer).

inferenceGatewayHeaders

string (JSON array of "Name: Value" strings)

Optional extra HTTP headers sent to your gateway on every inference request.

inferenceVertexProjectId

string

GCP project ID. Required when provider = vertex.

inferenceVertexRegion

string

GCP region. Required when provider = vertex.

inferenceVertexCredentialsFile

string

Absolute path to a service-account JSON or ADC file. No tilde or env-variable expansion. Required when provider = vertex.

inferenceVertexBaseUrl

string

Override the Vertex AI endpoint (for example, Private Service Connect). Leave unset to use the public regional endpoint.

inferenceVertexOAuthClientId

string

OAuth client ID for an interactive per-user Google sign-in, as an alternative to a shared service-account file.

inferenceVertexOAuthClientSecret

string

OAuth client secret paired with the client ID above.

inferenceVertexOAuthScopes

string (JSON array of scope string)

JSON string array of OAuth scopes to request. Defaults to the scope required for Vertex prediction.

inferenceBedrockRegion

string

AWS region. Required when provider = bedrock.

inferenceBedrockBearerToken

string

AWS bearer token. Required when provider = bedrock.

inferenceBedrockBaseUrl

string

Override the Bedrock endpoint (for example, VPC interface endpoint or LLM gateway). Leave unset to use the public regional endpoint.

inferenceBedrockProfile

string

AWS named profile from ~/.aws/config. Use when credentials are managed by AWS CLI, SSO, or an enterprise credential process.

inferenceBedrockAwsDir

string

Absolute path to the directory containing AWS config/credentials files, if not the default ~/.aws. Copied into the sandbox so the named profile resolves there.

inferenceFoundryResource

string

Azure AI Foundry resource name. Required when provider = foundry.

inferenceFoundryApiKey

string

Azure AI Foundry API key. Required when provider = foundry.

inferenceModels

string

JSON array of model IDs or aliases (sonnet, opus, haiku). First entry is the picker default. Required for Vertex, Bedrock, and Foundry.

inferenceCredentialHelper

string

Absolute path to an executable whose stdout is the inference credential. Runs on the host at session start.

inferenceCredentialHelperTtlSec

integer

How long (in seconds) to cache the helper output. Default: 3600.

Key

Type

Description

deploymentOrganizationUuid

string

Stable UUID identifying this deployment. Scopes local storage and telemetry.

autoUpdaterEnforcementHours

integer

When set, forces a pending update to install after this many hours regardless of user activity. When unset, the app uses a 72-hour window but defers while the user is active.

disableAutoUpdates

boolean

Blocks the app from checking for and downloading updates. The app stays on its installed version until updated by other means.

Key

Type

Description

disableEssentialTelemetry

boolean

Blocks crash and error reports and performance timing data sent to Anthropic.

disableNonessentialTelemetry

boolean

Blocks product-usage analytics — feature usage, navigation patterns, UI actions.

disableNonessentialServices

boolean

Blocks connector favicons (which leak MCP hostnames) and the artifact-preview sandbox. Connectors fall back to letter icons; artifacts don't render.

otlpEndpoint

string

Base URL of your OTLP collector. When set, sessions export logs and metrics (prompts, tool calls, token counts). The endpoint host is automatically added to the sandbox network allowlist.

otlpProtocol

string

http/protobuf (default), http/json, or grpc.

otlpHeaders

string

Comma-separated key=value pairs sent on every OTLP request (standard OTEL_EXPORTER_OTLP_HEADERS format).

Key

Type

Description

isDesktopExtensionEnabled

boolean

Permit users to install local desktop extensions (.dxt or .mcpb).

isDesktopExtensionDirectoryEnabled

boolean

Show the Anthropic extension directory in the connectors UI.

isDesktopExtensionSignatureRequired

boolean

Reject desktop extensions that aren't signed by a trusted publisher.

isLocalDevMcpEnabled

boolean

Permit users to add their own local MCP servers. When false, only servers from the managed list are available.

isClaudeCodeForDesktopEnabled

boolean

Show the Code tab (terminal-based coding sessions). Sessions run on the host, not inside the VM.

managedMcpServers

string

JSON array of remote MCP server configs. Each entry requires name and url. Optional: transport (http or sse), headers, oauth, toolPolicy.

disabledBuiltinTools

string

JSON array of tool names to remove from the agent tool list. See the MCP article for the full tool list.

coworkEgressAllowedHosts

String (JSON array of hostnames)

Absolute paths users may attach as workspace folders. Leading ~ expands to the user’s home. When set, any path outside this list is rejected.

Key

Type

Description

allowedWorkspaceFolders

string

JSON array of absolute paths the user may attach as workspace folders. Leading ~ expands to the per-user home directory. Unset = unrestricted.

inferenceMaxTokensPerWindow

integer

Total input+output tokens permitted per tumbling window before sendMessage is refused. Enforced in the desktop main process. Unset = no cap.

inferenceTokenWindowHours

integer

Tumbling window length for the token cap. Max 720h (30 days). The counter resets when now >= windowStartMs + windowHours×3600×1000.