Claude Code 2.1.285 lets you turn off web fetching, and admins limit its API providers
Claude Code 2.1.285 adds an environment variable, CLAUDE_CODE_DISABLE_WEB_FETCH, that turns off the WebFetch tool, and an allowedProviders managed setting that limits which API providers a machine may use. Anthropic's changelog puts both in 2.1.285, which npm records as published at 17:32 UTC on September 29.
Claude Code running in a browser, with a "Ready to code..." prompt above the acme/production/apps repository and a branch search dropdown open. Image: Anthropic Image: Anthropic
An administrator can allow the "Anthropic API, a custom endpoint, Bedrock, Mantle, Vertex AI, Foundry, Claude Platform on AWS, or a Cloud gateway", and nothing beyond that. It is a managed setting, written into a policy file, so a developer cannot widen it from their own config.
A URL password could survive log redaction
2.1.285 also fixes redacted logs and transcripts showing part of a URL password that contains an @ sign, or all of it when the URL writes its @ as %40. Anthropic attaches no severity rating and no CVE to it.
Two other changes touch how Claude Code starts and retries. CLAUDE_CODE_NONSTREAMING_TIMEOUT_RETRIES caps re-sends of a non-streaming fallback request that timed out, and a machine whose operating system denies reading the managed settings file will now start anyway: Claude Code warns and runs without that file's policies, while other read errors and unparseable files still stop every session.
Two fixes take approval prompts out of the way. Sandbox auto-allow no longer asks for approval on every run of many inline scripts, python3 -c and node -e among them, just because they contain an equals sign, and SSH passphrase and new-host prompts from worktree and /teleport fetches now fail fast instead of taking over the terminal.
The developer-facing additions are smaller. claude --desktop opens the Claude desktop app on the current directory, or on a session with --continue or --resume, and claude plugin configure lists a plugin's options and which are unset, or saves values read from stdin.
The release before it carried Sonnet 5.5
2.1.284, published to npm at 17:11 UTC on September 28, is the one that added Claude Sonnet 5.5 as the default Sonnet model on the Anthropic API, at $2 and $10 per million tokens with a 1M-token context window. It also put dollar amounts on the Claude apps gateway spend limit in /usage and the status line, in the form "$271.40 / $500.00 spent this month".
Most of the rest of 2.1.284 tightens edges. /mcp reconnect all retries every MCP server that failed to connect or needs authentication, a value for ANTHROPIC_FOUNDRY_RESOURCE that is not a plain resource name is now refused instead of being interpolated into the Foundry endpoint host, and auto mode gains a "Yes, but ask again next time" answer before a read outside the working directories.
npm lists 2.1.285 on both the latest and next tags, with stable still pointing at 2.1.280 from September 22, which is the release that blocked symlinked writes outside a project. The three versions in between, 2.1.281 to 2.1.283, went out over three days from September 23 to September 25.
