Wizard Overview

The SCC Wizard plugin provides interactive skills to help you create, edit, validate, and understand SCC configurations without memorizing the schema.

Prerequisites

Enable the scc-wizard plugin in your org config:

{
  "defaults": {
    "enabled_plugins": [
      "scc-wizard@sandboxed-code-official"
    ]
  }
}

Or install standalone in Claude Code:

/plugin marketplace add CCimen/sandboxed-code-plugins
/plugin install scc-wizard@<marketplace-key>

Available Wizards

Org Config Wizard

Create org configs with a success-first approach. Get a working config in ~60 seconds.

/scc-wizard:org

Team Config Wizard

Create team-config.json files for team-managed teams.

/scc-wizard:team

Explain Wizard

Understand why plugins are blocked, denied, or disabled.

/scc-wizard:explain

Validate Wizard

Validate configs before deployment with schema and semantic checks.

/scc-wizard:validate

Which Wizard Do I Need?

I want to…	Use
Set up a new organization	Org Config Wizard
Create a config for my team (team-managed)	Team Config Wizard
Understand why a plugin isn’t working	Explain Wizard
Check if my config is valid	Validate Wizard
Add teams to an existing org config	Org Config Wizard (Update mode)
Migrate org-managed teams to team-managed	Org Config Wizard (Migration mode)

Key Concepts

Org-managed vs Team-managed

Model	Description	When to Use
Org-managed	Org admin controls all plugin lists	Small orgs, pilots, centralized control
Team-managed	Teams maintain their own config files	Large orgs, self-service, distributed teams
Mixed	Some teams org-managed, some team-managed	Migration, different team needs

Blocked vs Denied vs Disabled

Term	Meaning	Can Change?
Blocked	Security boundary (`security.blocked_*`)	No - immutable
Denied	Delegation or allowlist rejection	Yes - update delegation
Disabled	Removed by `defaults.disabled_plugins`	Yes - re-enable

Next Steps

Create an Org Config Start with the org wizard

Schema Reference Full org-config.json schema