# Claude Code

> Claude Code is an officially published AI tool from Anthropic. Anomity scores its risk at 10 out of 100 (low).

- **Canonical URL:** https://catalog.anomity.ai/agent/claude-code
- **Kind:** AI tool
- **Publisher:** Anthropic
- **Trust level:** official
- **Risk score:** 10/100 (low)
- **Website:** https://claude.ai/code
- **Last updated:** 2026-09-02
- **JSON:** https://catalog.anomity.ai/api/entries/agent/claude-code

## Description

Terminal-based AI coding agent with MCP, plugins, and skills

## Why it scored 10

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |

Clamped result: **10/100**, band **low**.

## Configuration surface

Files this tool reads on the host. Anything written here changes what the agent does next.

- `claude-code-user-settings` — User-level settings
    - win32: `${USERPROFILE}\.claude\settings.json`
    - darwin: `${HOME}/.claude/settings.json`
    - linux: `${HOME}/.claude/settings.json`
- `claude-code-user-settings-local` — User-level local settings overrides
    - win32: `${USERPROFILE}\.claude\settings.local.json`
    - darwin: `${HOME}/.claude/settings.local.json`
    - linux: `${HOME}/.claude/settings.local.json`
- `claude-code-user-mcp` — User-level MCP servers in ~/.claude.json (top-level + per-project)
    - win32: `${USERPROFILE}\.claude.json`
    - darwin: `${HOME}/.claude.json`
    - linux: `${HOME}/.claude.json`
- `claude-code-managed-settings` — Enterprise managed settings
    - win32: `C:\Program Files\ClaudeCode\managed-settings.json`
    - darwin: `/Library/Application Support/ClaudeCode/managed-settings.json`
    - linux: `/etc/claude-code/managed-settings.json`
- `claude-code-managed-settings-dir` — Enterprise managed settings drop-ins (merged over the base file)
- `claude-code-managed-settings-legacy` — Legacy ProgramData managed settings (dead since v2.1.75 — misconfiguration signal)
    - win32: `C:\ProgramData\ClaudeCode\managed-settings.json`
- `claude-code-managed-prefs` — MDM machine policy (macOS managed preferences)
- `claude-code-remote-settings` — Cached server-managed org policy from the Claude admin console
    - win32: `${USERPROFILE}\.claude\remote-settings.json`
    - darwin: `${HOME}/.claude/remote-settings.json`
    - linux: `${HOME}/.claude/remote-settings.json`
- `claude-code-stats-cache` — Usage + spend aggregates (tokens, cost, sessions) for AI-spend visibility
    - win32: `${USERPROFILE}\.claude\stats-cache.json`
    - darwin: `${HOME}/.claude/stats-cache.json`
    - linux: `${HOME}/.claude/stats-cache.json`
- `claude-code-managed-mcp` — Enterprise managed MCP servers
    - win32: `C:\Program Files\ClaudeCode\managed-mcp.json`
    - darwin: `/Library/Application Support/ClaudeCode/managed-mcp.json`
    - linux: `/etc/claude-code/managed-mcp.json`
- `claude-code-project-mcp` — Project-level MCP servers
    - win32: `${PROJECT}\.mcp.json`
    - darwin: `${PROJECT}/.mcp.json`
    - linux: `${PROJECT}/.mcp.json`
- `claude-code-project-settings` — Project-level settings
    - win32: `${PROJECT}\.claude\settings.json`
    - darwin: `${PROJECT}/.claude/settings.json`
    - linux: `${PROJECT}/.claude/settings.json`
- `claude-code-project-settings-local` — Project-level local settings (gitignored)
    - win32: `${PROJECT}\.claude\settings.local.json`
    - darwin: `${PROJECT}/.claude/settings.local.json`
    - linux: `${PROJECT}/.claude/settings.local.json`
- `claude-code-plugin-index` — Claude Code installed plugins index
    - win32: `${USERPROFILE}\.claude\plugins\installed_plugins.json`
    - darwin: `${HOME}/.claude/plugins/installed_plugins.json`
    - linux: `${HOME}/.claude/plugins/installed_plugins.json`
- `claude-code-plugin-manifest` — Claude Code plugin manifests (per cached plugin)
- `claude-code-user-skill` — Personal Claude Code skills (user-scope)
- `claude-code-scheduled-task-skill` — Scheduled-task skills (~/.claude/scheduled-tasks/*/SKILL.md) — agent-authored routines that run unattended on a cron cadence, often carrying credentials for the systems they poll
- `claude-code-project-skill` — Project-scope Claude Code skills
- `claude-code-plugin-skill` — Skills bundled inside installed Claude Code plugins
- `claude-code-user-agent` — Personal Claude Code custom subagents (user-scope)
- `claude-code-project-agent` — Project-scope Claude Code custom subagents

## Related AI tools

- [AdaL](https://catalog.anomity.ai/agent/adal) — risk 10 (low)
- [Agent Zero](https://catalog.anomity.ai/agent/agent-zero) — risk 10 (low)
- [Aide](https://catalog.anomity.ai/agent/aide) — risk 10 (low)
- [Aider](https://catalog.anomity.ai/agent/aider) — risk 10 (low)
- [AiderDesk](https://catalog.anomity.ai/agent/aider-desk) — risk 10 (low)
- [Amazon Q Developer](https://catalog.anomity.ai/agent/amazon-q) — risk 10 (low)

---

Source: Anomity Catalog (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json
