inferenceProvider: gateway and inferenceGatewayBaseUrl: https://api.abliteration.ai. Once configured, every Cowork and Claude Code Desktop session routes through abliteration; Anthropic never sees prompts or completions. The same Claude Desktop binary runs both standard and 3P modes — the managed configuration profile activates 3P.
Requirements
| OS | macOS 13 (Ventura) or later, Windows 10 or 11 (Virtual Machine Platform feature enabled) |
| App | Claude Desktop, downloaded from claude.com/download |
| Gateway endpoint | https://api.abliteration.ai |
| API key | An ak_... key from the console |
Configuration keys
Cowork reads its configuration once at launch. Quit and relaunch after any change.| Key | Required | Value |
|---|---|---|
inferenceProvider | Yes | gateway |
inferenceGatewayBaseUrl | Yes | https://api.abliteration.ai |
inferenceGatewayApiKey | Yes | ak_YOUR_API_KEY |
inferenceGatewayAuthScheme | No | bearer (default) or x-api-key |
inferenceGatewayHeaders | No | JSON-string array of extra "Name: Value" headers (e.g. ["X-Org-Id: team1"]) |
inferenceModels | No | JSON-string array. Omit to auto-discover via GET /v1/models. |
Setup via the in-app UI
For a single device or to generate a profile for fleet rollout:- Open Claude Desktop. Help → Troubleshooting → Enable Developer Mode.
- Developer → Configure third-party inference.
- Select
Gateway, enter the values from the table above, save. - Use Export to write
.mobileconfig(macOS) or.reg(Windows) for distribution.
Setup via MDM
Push the same keys directly to the OS preference store.macOS
Domain:com.anthropic.claudefordesktop. Deliver via Jamf, Kandji, Mosyle, or any MDM that supports App Configuration.
<string> containing a JSON array, not a native plist <array>:
Windows
Registry path:HKCU\SOFTWARE\Policies\Claude (per-user) or HKLM\SOFTWARE\Policies\Claude (machine-wide). Deliver via Group Policy, Intune, or any MDM that supports .reg files.
Authentication
| Scheme | Header sent |
|---|---|
bearer (default) | Authorization: Bearer ak_... |
x-api-key | x-api-key: ak_... |
/v1/messages. For environments that disallow static keys, point inferenceCredentialHelper at an executable that prints a short-lived credential to stdout (TTL via inferenceCredentialHelperTtlSec, default 3600 s).
Models
WheninferenceModels is unset, Cowork populates the picker from GET /v1/models. Today that surfaces abliterated-model. To pin explicitly:
Verifying the install
Launch Claude Desktop on a test machine. You should see:- Cowork and Code tabs in the left navigation
- No Chat tab
- A Gateway sign-in option
inferenceProvider is set and that the gateway key is valid. macOS console logs and Windows Event Viewer surface deeper errors.
Per-user policy
Cowork’s blanket usage caps (inferenceMaxTokensPerWindow, inferenceTokenWindowHours) apply per device. For per-user or per-team enforcement, issue a project-scoped key per user — policy rules attached to that key apply to every Cowork turn. Streaming policy metadata is delivered on every SSE frame; see streaming policy metadata.
Data handling
Inference traffic terminates at abliteration.ai — Anthropic never sees prompts, completions, or tool inputs. Telemetry to Anthropic is metadata only (token counts, error diagnostics) and can be disabled withdisableEssentialTelemetry and disableNonessentialTelemetry. See security.
Reference
- Anthropic configuration key reference
- Anthropic gateway provider page
- Anthropic support: install and configure, use with 3P