Claude Code
Waxell serves everything you approve as a Claude Code plugin marketplace
called waxell-approved. Claude Code installs from it directly; managed
settings can make it the only marketplace your people can use.
Turn on the marketplace
In Govern → Skills & Plugins → Settings → Approved marketplace, click Turn on. You get a private marketplace URL.
The URL serves only what you've approved; anyone with it can read the approved list, so treat it like a shared link. Rotate URL replaces it immediately (the old one stops working, and anything pointing at it needs the new one).
Claude Code 2.1.224 or later is required.
Try it yourself
Step 4 on the Settings page, Just you — try it in your own Claude Code, gives you a command to run in Claude Code:
/plugin marketplace add https://api.waxell.dev/api/waxell/v1/extensions/<your-token>/marketplace.json
Then /plugin lists your approved plugins. This only affects your own Claude
Code.
Lock it in for everyone
Step 3, Claude Code — lock it in for everyone, gives you a managed-settings block. Apply it in either place:
- claude.ai → Admin settings → Claude Code → Managed settings (paste it), or
- your device-management tool, as
managed-settings.json.
The block:
| Setting | Effect |
|---|---|
extraKnownMarketplaces | Registers your approved marketplace on every machine, refreshing automatically. |
strictKnownMarketplaces | Claude Code accepts only your approved marketplace (and the Waxell governance plugin's, if you use it). |
enabledPlugins | Turns on everything marked Required; turns off anything revoked — wherever it was installed from. |
disableSideloadFlags | Blocks loading plugins any other way (for example --plugin-dir). |
With the block applied, plugins from any other marketplace — including
Anthropic's — stop working for everyone. People who build plugins locally lose
--plugin-dir. Tell your team before you apply it.
When to re-apply it
Claude Code refreshes the marketplace in the background, so new approvals show up, and revoked plugins are uninstalled at the next session, without touching managed settings.
Re-apply the block when you change what's Required. The Settings page tells you: Changed since you copied it — re-apply to update Required and blocked items.
Is anyone using it?
The top of the Approved marketplace panel shows when the marketplace was last fetched, how many times, how many plugins were downloaded, and which clients fetched it (Claude Code, Claude Desktop / claude.ai, scripts, browsers).