8 pages for allowread.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry
Claude Code CLI · in the page
claude-apps-gateway
…"allowManagedReadPathsOnly": true, "denyRead": ["~/"], "allowRead": ["~/projects"] } } } ``` An OS policy, such as an HKLM registry policy or a managed-preferences plist, outranks…
Deploy managed settings
Claude Code CLI · in the page
managed-settings
…ether with `WebFetch(domain:...)` allow rules, or `sandbox.filesystem.allowRead`, across every admin source. Without the lock, Claude Code treats the allowlist like any other key, so under `"first-win…
Configure the sandboxed Bash tool
Claude Code CLI · in the page
sandboxing
…allow specific paths within a denied region using `sandbox.filesystem.allowRead`. When read rules overlap, the rule with the narrower path applies: | Example rules…
Deploy self-hosted environments to production
Claude Code CLI · in the page
self-hosted-environments-deploy
…rule in `permissions.allow`, or a `sandbox.filesystem.allowWrite` or `allowRead` entry * A non-empty `env` block * An operator-posture override such as `sandbox.enabled: false` The guard runs r…
Claude Code settings
Claude Code CLI · in the page
settings
…` | | `filesystem.allowRead` | Paths to re-allow reading within `denyRead` regions. An `allowRead` path re-opens reading inside a…
All settings
Claude Code CLI · in the page
settings-reference
…| Managed | | [`sandbox.filesystem.allowRead`](#sandbox-filesystem-allowread) | Re-open reading inside a region [`denyRead`](#s…
Code in Claude Desktop on 3P
Claude Documentation · in the page
third-party/claude-desktop/code
…pen any path, up to their whole home folder, with `sandbox.filesystem.allowRead` (shell commands) or `permissions.additionalDirectories` (file tools and shell commands) in their own Claude Code settin…
Configuration reference
Claude Documentation · in the page
third-party/claude-desktop/configuration
…hole home) in their own Claude Code settings with `sandbox.filesystem.allowRead` or `permissions.additionalDirectories`; settings files tracked in a git repository cannot. The key travels on Claude Co…