34 pages for mask.

compliance-sessions Claude Developer Platform · in the page manage-claude/compliance-sessions …s, all returned as they were sent apart from size truncation. Nothing masks URLs, credentials, or personal data in that content, so treat transcripts as sensitive. The transcript omits or replaces the… Use Claude Code features in the SDK Claude Code CLI · in the page agent-sdk/claude-code-features …s`](/docs/en/sandboxing#protect-credentials) `deny` entries and file `mask` entries in `~/.claude/settings.json` | When the [command sandbox](/docs/en/sandboxing) runs, Claude Code applies the `deny`… Claude Code changelog Claude Code CLI · in the page changelog …[Pasted text #N]` placeholder when the cursor was inside it * Fixed masked (password-style) inputs such as the login code field letting their text be pasted back with Ctrl+Y elsewhere or saved to pr… Channels reference Claude Code CLI · in the page channels-reference …fields are unchanged. Clients on Claude Code v2.1.234 or later also mask credentials in `description` and `input_preview`. You receive `[REDACTED]` in place of a recognizable provider credential tok… Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry Claude Code CLI · in the page claude-apps-gateway …ly their `path` or `name` and the mode. * **File entries with [`mode: mask`](/docs/en/sandboxing#mask-credential-files)**: forwarded sentinel-only, as a whole-file mask whose `injectHosts` is the empt… Claude Code GitLab CI/CD Claude Code CLI · in the page gitlab-ci-cd …de patterns * **Simple setup**: Add one job to `.gitlab-ci.yml` and a masked CI/CD variable * **Enterprise-ready**: Choose Claude API, Amazon Bedrock, or Google Cloud's Agent Platform to meet data res… Connect Claude Code to tools via MCP Claude Code CLI · in the page mcp …p's client ID. The `--client-secret` flag prompts for the secret with masked input: ```bash theme={null} claude mcp add --transport http \ --client-id your-client-id --clien… Create and distribute a plugin marketplace Claude Code CLI · in the page plugin-marketplaces …`plugin.json` value without warning, so a stale manifest version can mask a version you set in `marketplace.json`. </Warning> #### Set up release channels To support "stable" and "latest" release c… Plugins reference Claude Code CLI · in the page plugins-reference …| | `sensitive` | No | If `true`, masks input and stores the value in secure storage instead of `settings.json` | | `required` | No | If `true`, validation… Configure the sandboxed Bash tool Claude Code CLI · in the page sandboxing …| | `"mode": "mask"`, applied as a mask | No… Deploy self-hosted environments to production Claude Code CLI · in the page self-hosted-environments-deploy …nd-runner), so the secret never appears in your shell history. Run `(umask 077 && cat > ./environment-secret)`, paste the secret, press Enter, then Ctrl-D. Then create the Secret and delete the file:… Self-hosted environments quickstart Claude Code CLI · in the page self-hosted-environments-quickstart …the value you copied, press Enter, then Ctrl-D, and the subshell's `umask` makes the file readable only by its owner. ```bash theme={null} (umask 077 && cat > /etc/claude/environment-secret)… Test self-hosted environments end to end Claude Code CLI · in the page self-hosted-environments-testing …tial that can register runners into the environment, so store it as a masked CI secret and print only the environment ID. The `-H @-` form that keeps the token out of the process list requires curl 7.… Claude Code settings Claude Code CLI · in the page settings …or `envVars` that still has a valid `path` or `name` and a `mode` of `mask` or `deny`, such as one whose `extract` pattern has no capturing group, is degraded to `mode: "deny"` with a warning, so the… Claude Code settings reference Claude Code CLI · in the page settings-reference …dentials) | Hide or mask credential files and variables inside the [sandbox](/docs/en/sandboxing#protect-credentials)… Extend Claude with skills Claude Code CLI · in the page skills …ession matters because leftover context from authoring the skill will mask gaps in the written instructions. ### Run evals with skill-creator The [`skill-creator` plugin](https://github.com/anthropi… Week 32 · August 3–7, 2026 Claude Code CLI · in the page whats-new/2026-w32 …div>Sandbox credential files accept <a href="/docs/docs/en/sandboxing#mask-credential-files"><code>mode: "mask"</code></a> on Linux and WSL2, so sandboxed commands read a sentinel copy while the sandb… Changelog Claude Documentation · in the page cowork/changelog …, when also present, still wins on `Authorization`. Header values are masked in diagnostics, and both keys are accepted only from device management or a local configuration file. * Added the option… Deploy with a bootstrap server Claude Documentation · in the page third-party/claude-desktop/bootstrap …n file only, never from the bootstrap response, and header values are masked in the diagnostic report. [Origin pinning](#origin-pinning) applies in this mode exactly as in device-code mode. Use this i… Configuration reference Claude Documentation · in the page third-party/claude-desktop/configuration …ces` with `credentialKind: "inferenceCredential"`). Header values are masked in diagnostics and telemetry. For a rotating token, use the headers helper script instead. </Accordion> <Accordion tit… Debugging Model Context Protocol · in the page docs/2024-11-05/tools/debugging …. **Sensitive Data** * Sanitize logs * Protect credentials * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor access patterns F… Security Best Practices Model Context Protocol · in the page docs/2024-11-05/tutorials/security/security_best_practices …ge token disrupts all workflows * Audit noise: single omnibus scope masks user intent per operation * Privilege chaining: attacker can immediately invoke high-risk tools without further elevation… Debugging Model Context Protocol · in the page docs/2025-03-26/tools/debugging …. **Sensitive Data** * Sanitize logs * Protect credentials * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor access patterns F… Security Best Practices Model Context Protocol · in the page docs/2025-03-26/tutorials/security/security_best_practices …ge token disrupts all workflows * Audit noise: single omnibus scope masks user intent per operation * Privilege chaining: attacker can immediately invoke high-risk tools without further elevation… Debugging Model Context Protocol · in the page docs/2025-06-18/tools/debugging …. **Sensitive Data** * Sanitize logs * Protect credentials * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor access patterns F… Security Best Practices Model Context Protocol · in the page docs/2025-06-18/tutorials/security/security_best_practices …ge token disrupts all workflows * Audit noise: single omnibus scope masks user intent per operation * Privilege chaining: attacker can immediately invoke high-risk tools without further elevation… Debugging Model Context Protocol · in the page docs/2025-11-25/tools/debugging …. **Sensitive Data** * Sanitize logs * Protect credentials * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor access patterns F… Security Best Practices Model Context Protocol · in the page docs/2025-11-25/tutorials/security/security_best_practices …ge token disrupts all workflows * Audit noise: single omnibus scope masks user intent per operation * Privilege chaining: attacker can immediately invoke high-risk tools without further elevation… Debugging Model Context Protocol · in the page docs/2026-07-28/tools/debugging …. **Sensitive Data** * Sanitize logs * Protect credentials * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor access patterns F… Web client Model Context Protocol · in the page docs/2026-07-28/tools/inspector/web …h is where most stdio servers put their own diagnostics. Secrets are masked in these views, and entries can be cleared or exported. <Frame caption="The Protocol tab with an entry expanded, showing t… Security Best Practices Model Context Protocol · in the page docs/2026-07-28/tutorials/security/security_best_practices …ge token disrupts all workflows * Audit noise: single omnibus scope masks user intent per operation * Privilege chaining: attacker can immediately invoke high-risk tools without further elevation… Debugging Model Context Protocol · in the page docs/draft/tools/debugging …. **Sensitive Data** * Sanitize logs * Protect credentials * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor access patterns F… Web client Model Context Protocol · in the page docs/draft/tools/inspector/web …h is where most stdio servers put their own diagnostics. Secrets are masked in these views, and entries can be cleared or exported. <Frame caption="The Protocol tab with an entry expanded, showing t… Security Best Practices Model Context Protocol · in the page docs/draft/tutorials/security/security_best_practices …ge token disrupts all workflows * Audit noise: single omnibus scope masks user intent per operation * Privilege chaining: attacker can immediately invoke high-risk tools without further elevation…