allowedEnvVars
A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
A variable whose value looks like a credential is now refused when interpolating into HTTP hook headers.
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.257.
In the changelogs
4Releases whose published page names allowedEnvVars.
-
v2.1.317
Plugin lists can be shortened to fit, and HTTP plugin hooks can carry headers
Plugin listings now trim long entries and drop ones that don't fit, and HTTP plugin hooks gain headers and allowed environment variables
found in this entry's text
-
v2.1.317
Plugin hooks run for another machine can now be http hooks
Claude Code can now run a plugin's http hooks for another machine, for account plugins only and not on SessionStart or Setup
found in this entry's text
-
v2.1.257
Hook env var interpolation now blocks credential-looking values from HTTP headers
A variable whose value looks like a credential is now refused when interpolating into HTTP hook headers.
named in this entry, found in this entry's text
-
v2.1.63
HTTP Hooks (Now Functional)
found in this entry's text
First cited
0No release's published evidence quotes this name. The ledger indexes the Evidence lines of every changelog on this site, so this says nobody here has ever quoted it; it says nothing about how old the name is.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.