8 pages for denyread.

Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry Claude Code CLI · in the page claude-apps-gateway …, "filesystem": { "allowManagedReadPathsOnly": true, "denyRead": ["~/"], "allowRead": ["~/projects"] } } } ``` An OS policy, such as an HKLM registry policy or a managed-p… Communications kit Claude Code CLI · in the page communications-kit …as `ls` and `cat` runs without prompting; restrict it with [sandbox `denyRead` rules](/docs/en/sandboxing#filesystem-isolation). [Permissions →](/docs/en/permissions) | | "How is this different from… Deploy managed settings Claude Code CLI · in the page managed-settings …wlist grants nothing until you fix the deny list. * While `filesystem.denyRead`, `filesystem.denyWrite`, or any entry in either is invalid, Claude Code also withholds both `filesystem.allowRead` and `… Configure the sandboxed Bash tool Claude Code CLI · in the page sandboxing …d access using `sandbox.filesystem.denyWrite` and `sandbox.filesystem.denyRead`, and re-allow specific paths within a denied region using `sandbox.filesystem.allowRead`. When read rules overlap, the r… Security Claude Code CLI · in the page security …oader read access available to read-only Bash commands with [sandbox `denyRead` rules](/docs/en/sandboxing#filesystem-isolation), which apply only when sandboxing is enabled * **Prompt fatigue mitigat… Claude Code settings Claude Code CLI · in the page settings …in"]` | | `filesystem.denyRead` | Paths where sandboxed commands cannot read. Arrays are merged across all settings scopes. Also merg… Example settings files Claude Code CLI · in the page settings-example …our `Read` deny paths](/docs/en/settings-reference#sandbox-filesystem-denyread) to what every sandboxed command can't read. <Tabs> <Tab title="Copyable settings file"> Save this as `.claude/set… All settings Claude Code CLI · in the page settings-reference …| Re-open reading inside a region [`denyRead`](#sandbox-filesystem-denyread) blocks…