3 pages for maskclaims.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
Configure the sandboxed Bash tool
Claude Code CLI · in the page
sandboxing
…ABASE_URL` connection string or a JWT, use the [`extract`, `decode`, `maskClaims`, and `onExtractNoMatch` fields](/docs/en/settings-reference#sandbox-credentials-envvars) so tools that parse the value…
Claude Code settings
Claude Code CLI · in the page
settings
…| | `credentials.files[].maskClaims` | Top-level payload claims to mask inside each verified JWT instead of replacing the whole token. Requires `de…
All settings
Claude Code CLI · in the page
settings-reference
…nExtractNoMatch` governs the outcome. Requires v2.1.224 or later | | `maskClaims` | array of strings, at least one claim name; requires `decode` | Mask only the named top-level payload claims inside e…