> ## Documentation Index
> Fetch the complete documentation index at: https://enterprise-docs.dify.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Plugin installation strategy

System administrators can manage the installation policies of plugins for all workspaces within the current Enterprise Edition globally through the Plugin Management page in the Enterprise Edition management backend. By controlling plugin types and sources, they can ensure enterprise data security and application stability.

## Managing Plugin Installation

In the Enterprise Edition management backend, click **Plugin Management** in the left-hand menu to enter the plugin management page, and find **Plugin Installation Policy**. On this page, you can:

* View current plugin policy configurations
* Control allowed plugin types for installation
* Restrict plugin installation sources

## Allow Specific Plugin Types

Administrators can select allowed plugin types for installation through the "Allowed Plugins" dropdown menu:

| Plugin Type        | Description                                                                                                                           |
| ------------------ | ------------------------------------------------------------------------------------------------------------------------------------- |
| All                | Allow installation of all plugin types, including official plugins, partner plugins, and third-party developed plugins                |
| Official + Partner | Only allow installation of Dify official plugins and certified partner plugins, providing a good balance of security and stability    |
| Official           | Only allow installation of plugins developed and maintained by Dify officially, providing high-level security and stability assurance |
| None               | Prohibit installation of any plugins, suitable for environments with extremely high security requirements                             |

**Plugin Source Description:**

In the plugin marketplace, you can identify different types of plugins through tags and author names:

![](https://assets-docs.dify.ai/2025/06/c2bfdfbb2132848e589073600e55ffab.png)

## Control Plugin Installation Sources

### Marketplace Installation Restrictions

The "Restrict to Marketplace Installations" toggle controls plugin installation sources, helping administrators balance functional requirements and security risks:

| Setting Status      | Allowed Installation Channels          | Security Level |
| ------------------- | -------------------------------------- | -------------- |
| Enable Restriction  | Dify official plugin marketplace only  | High           |
| Disable Restriction | Marketplace, local files, GitHub, etc. | Low            |

**Plugin Installation Source Channels Overview:**

| Installation Method         | Security Review                     | Version Management                       | Documentation                  |
| --------------------------- | ----------------------------------- | ---------------------------------------- | ------------------------------ |
| Official Plugin Marketplace | Security reviewed                   | Automatic version management and updates | Detailed usage documentation   |
| Local File Installation     | Requires self-assessment            | Manual management required               | Depends on developer           |
| GitHub Installation         | Requires code security verification | Timely version updates but manual        | Depends on project maintenance |

### Signature Installation Restrictions

In addition to restricting plugins to marketplace-only installation in the management console, you can also control plugin installation by modifying environment file variable values in the deployment.

Plugin signatures can be considered as trusted source verification for plugins, and verification will be performed during plugin installation. When deploying the enterprise edition, the `FORCE_VERIFYING_SIGNATURE` in the environment variable file controls plugin signature verification. If plugin signature restrictions are enabled in environment variables, it will affect plugin installation.

* For information on how to control signature installation restrictions through environment variables during deployment, please refer to the deployment manual.

```yaml theme={null}
FORCE_VERIFYING_SIGNATURE=false # Disable forced signature verification
FORCE_VERIFYING_SIGNATURE=true # Enable forced signature verification
```

**Relationship Overview between Signature Verification and Marketplace Installation Restrictions:**

### Enable Marketplace Installation Restrictions

| Environment Variable Configuration | Marketplace Installation | GitHub Online Installation (with signature) | GitHub Online Installation (without signature) | Manual Installation (with signature) | Manual Installation (without signature) |
| ---------------------------------- | ------------------------ | ------------------------------------------- | ---------------------------------------------- | ------------------------------------ | --------------------------------------- |
| Verify signature                   | ✅ Allow installation     | ❌ Not allowed                               | ❌ Not allowed                                  | ❌ Not allowed                        | ❌ Not allowed                           |
| Don't verify signature             | ✅ Allow installation     | ❌ Not allowed                               | ❌ Not allowed                                  | ❌ Not allowed                        | ❌ Not allowed                           |

### Disable Marketplace Installation Restrictions

| Environment Variable Configuration | Marketplace Installation | GitHub Online Installation (with signature) | GitHub Online Installation (without signature) | Manual Installation (with signature) | Manual Installation (without signature) |
| ---------------------------------- | ------------------------ | ------------------------------------------- | ---------------------------------------------- | ------------------------------------ | --------------------------------------- |
| Verify signature                   | ✅ Allow installation     | ✅ Allow installation                        | ❌ Not allowed                                  | ✅ Allow installation                 | ❌ Not allowed                           |
| Don't verify signature             | ✅ Allow installation     | ✅ Allow installation                        | ✅ Allow installation                           | ✅ Allow installation                 | ✅ Allow installation                    |

> **Note**: All plugins provided on Dify Marketplace include Dify signatures.