7 pages for denyread.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
Claude Code changelog
Claude Code CLI · in the page
changelog
…ndboxed commands failing to start on Linux when a `sandbox.filesystem.denyRead` glob contains brackets that are not a character class, such as a `[user-id]` route folder * Fixed `rm -r` of a mounted d…
Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry
Claude Code CLI · in the page
claude-apps-gateway
…, "filesystem": { "allowManagedReadPathsOnly": true, "denyRead": ["~/"], "allowRead": ["~/projects"] } } } ``` An OS policy, such as an HKLM registry policy or a managed-p…
Deploy managed settings
Claude Code CLI · in the page
managed-settings
…wlist grants nothing until you fix the deny list. * While `filesystem.denyRead`, `filesystem.denyWrite`, or any entry in either is invalid, Claude Code also withholds both `filesystem.allowRead` and `…
Configure the sandboxed Bash tool
Claude Code CLI · in the page
sandboxing
…ential files such as `~/.ssh` and `~/.aws/credentials` | [`filesystem.denyRead`](https://code.claude.com/docs/en/settings-reference#sandbox-filesystem-denyread), [`credentials`](#protect-credentials)…
Claude Code settings
Claude Code CLI · in the page
settings
…in"]` | | `filesystem.denyRead` | Paths where sandboxed commands cannot read. Arrays are merged across all settings scopes. Also merg…
Example settings files
Claude Code CLI · in the page
settings-example
…https://code.claude.com/docs/en/settings-reference#sandbox-filesystem-denyread) to what every sandboxed command can't read. > [tab] Copyable settings file > > Save this as `.claude/settings.json` at…
All settings
Claude Code CLI · in the page
settings-reference
…`](#sandbox-filesystem-allowread) | Re-open reading inside a region [`denyRead`](#sandbox-filesystem-denyread) blocks | Sandbox settings | Any file | | [`sandbox.filesystem.allowWrite`](#sandbox-files…