GIT_ALLOW_PROTOCOL
A Claude Code environment variable, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Git subprocesses now block graft files as an extra hardening measure
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.235.
In the changelogs
11Releases whose published page names GIT_ALLOW_PROTOCOL.
-
v2.1.309
Safer worktree checkouts for partial clones, behind a remote switch
Behind a remote switch, worktree checkouts turn off git's on-demand fetching and fetch missing objects for partial clones up front
found in this entry's text
-
v2.1.285
Git commands when creating a worktree now use stricter settings
Creating a worktree now runs git with a hardened set of settings, including limits on network protocols and no interactive SSH prompts
found in this entry's text
-
v2.1.285
Git's security settings changed for git commands Claude Code runs
Git commands run by Claude Code now take their allowed network protocols from a shared value and set
GIT_NO_LAZY_FETCHandGIT_TERMINAL_PROMPTfound in this entry's text
-
v2.1.280
Self-hosted runner: session-scoped git config for lifecycle hooks
Self-hosted runner sessions now get their own git config so lifecycle hooks use separate signing and protocol rules from the main checkout
found in this entry's text
-
v2.1.275
Sandbox/BYOC git helper hard-disables SSH when GIT_ALLOW_PROTOCOL=none
Git subprocesses now fully block SSH when GIT_ALLOW_PROTOCOL is set to 'none', closing a bypass
found in this entry's text
-
v2.1.274
Git subprocess environment hardened with stricter protocol/network controls
Git subprocesses launched by Claude Code now run with stricter network and protocol restrictions
found in this entry's text
-
v2.1.259
New env vars added to allowlists/passthrough
Several environment variables were added to passthrough allowlists, including GIT_ALLOW_PROTOCOL and CLAUDE_CODE_SKILL_PROPOSALS.
found in this entry's text
-
v2.1.251
Git commands run with sanitized SSH and protocol environment
Git runs with strict host-key checking and risky protocols disabled, no matter your environment.
named in this entry, found in this entry's text
-
v2.1.248
Git runs with a pinned environment and a blocked-flag list
Git now runs under fixed environments that block network protocols unless the operation needs them.
named in this entry, found in this entry's text
-
v2.1.236
Git commands run for cloud seeding can no longer reach the network or prompt
Git calls made while packaging your repo for the cloud cannot fetch or ask for passwords.
named in this entry, found in this entry's text
-
v2.1.235
Git subprocesses hardened against graft files
Git subprocesses now block graft files as an extra hardening measure
found in this entry's text
First cited
6The earliest release whose published evidence quoted GIT_ALLOW_PROTOCOL was v2.1.236, 19 Aug 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the environment variable does. All environment variables.