Enterprise rollout

1. Provider / identity
   ├─ Direct Anthropic Team / Enterprise?
   │  ├─ Yes: organizational identity, SSO/SCIM, server settings and analytics
   │  └─ No: Passion8/custom gateway, enterprise IdP, key mapping and endpoint policy
   └─ Key ownership: individual, team service account, project or short-lived token

2. Network
   ├─ Direct access to api.anthropic.com / claude.ai / downloads.claude.ai?
   ├─ Corporate proxy, TLS inspection, CA or mTLS?
   └─ Gateway: define URL, allowlist, retries, limits and logging boundaries

3. Settings delivery
   ├─ Server-managed: official cloud delivery for Anthropic organizations
   └─ Endpoint-managed: MDM, registry, system files and templates for enforced/custom-provider policy

4. Permissions
   ├─ Default allow / ask / deny
   ├─ Auto mode: environment / allow / soft_deny / hard_deny
   └─ Disable bypass; protect sensitive files and dangerous shell; isolate risky projects

5. MCP
   ├─ Disable, fixed deployment, approved catalog, plugin-only or denylist
   ├─ System managed-mcp.json cannot be delivered through server settings
   └─ Govern OAuth, headersHelper, environment and token storage separately

6. Observability
   ├─ Adoption: users, sessions, acceptance and code contributions
   ├─ Cost: spend, tokens, model, project, team and cache hits
   ├─ Tools: Bash, Edit, MCP, hooks and auto decisions
   └─ Errors: auth, network, provider errors, tools and policy denials

7. Training / support
   ├─ Pilot users, champions, templates and default permissions
   ├─ Troubleshoot URL, token, proxy, CA, MCP and settings merge
   └─ Support queues, tickets, escalation and change announcements

{
  "autoMode": {
    "environment": [
      "Company source code lives under github.example.com/acme and approved internal GitLab groups.",
      "Production credentials are never available in developer workstations.",
      "Approved package registries are npm.corp.example.com and pypi.corp.example.com.",
      "Network egress goes through the corporate proxy and approved gateways."
    ],
    "allow": [
      "$defaults",
      "Read(./src/**)",
      "Read(./docs/**)",
      "Edit(./src/**)",
      "Edit(./tests/**)",
      "Bash(npm test)",
      "Bash(npm run lint)",
      "Bash(git diff *)"
    ],
    "soft_deny": [
      "Bash(npm install *)",
      "Bash(pip install *)",
      "WebFetch(*)",
      "mcp__jira__create_*"
    ],
    "hard_deny": [
      "Read(./.env)",
      "Read(./.env.*)",
      "Read(./secrets/**)",
      "Read(./**/*private_key*)",
      "Bash(curl * | sh)",
      "Bash(rm -rf *)",
      "Bash(git push *)",
      "mcp__prod_database__write_*"
    ]
  }
}