allow_cidrs
A Claude Code settings key, read out of the shipped bundle. It was in the build from v2.1.287 and was gone by v2.1.307.
Self-hosted gateway now warns once if a client connects from a public IP with no allowlist set
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.268.
In the changelogs
2Releases whose published page names allow_cidrs.
-
v2.1.268
Gateway warns once when a client connects from a non-private IP with no allowlist configured
Self-hosted gateway now warns once if a client connects from a public IP with no allowlist set
found in this entry's text
-
v2.1.268
New gateway config warning for empty access_control.allow_cidrs
The gateway now warns if access_control.allow_cidrs is left empty and any client address can connect
found in this entry's text
First cited
1The earliest release whose published evidence quoted allow_cidrs was v2.1.268, 10 Sep 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
4Build by build
20One row per release since the first build this name was read out of. Absent means the build was read and the name was not in it, never mined means no bundle for that release was ever archived, and a declared type or a default is only ever what that release's own bundle stated.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.