allowRead
A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
The runner can warn about or block repo-committed settings that grant access outside the workspace.
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.224.
In the changelogs
14Releases whose published page names allowRead.
-
v2.1.304
Linux sandbox blocks nested user namespaces and protects credential files
On Linux, sandboxed commands are now stopped from creating user namespaces where possible, and credential files stay blocked even under allowRead
found in this entry's text
-
v2.1.304
Sandbox blocks on credential files now win over broader allow rules
Sandbox allow rules no longer reopen blocked credential files, and the network proxy gains stricter options
found in this entry's text
-
v2.1.288
Sandbox read rules can now include user settings handed in directly
The list of files sandboxed commands may not read can now include user settings passed in directly, merged without duplicates
found in this entry's text, named in this entry
-
v2.1.285
Sandbox drops read and write paths that were re-linked after setup
Sandbox
allowReadandallowWritepaths re-pointed by a link after setup are now checked again and dropped if unsafe or pointing into a denied pathfound in this entry's text, named in this entry
-
v2.1.285
Sandbox ignores some project-level file access grants
Project and local settings can no longer widen sandbox file access when an admin requires the sandbox or the path is under a denied read path
found in this entry's text
-
v2.1.285
Risky sandbox grants committed in a repository are now withheld
With
blockReadsOutsideWorkingDirectorieson, a repository'sallowReadandallowWritegrants are withheld if they are globs, network paths or risky symlinksfound in this entry's text, named in this entry
-
v2.1.284
Sandbox path rules now follow symbolic links and respect read-deny rules
Sandbox path patterns now match through linked folders, and
denyReadrules are no longer undercut by default writable foldersfound in this entry's text
-
v2.1.284
Sandbox read and write rules are now worked out together
Paths Claude's sandbox may write to are now worked out from
denyRead,allowReadand credentials togethernamed in this entry, found in this entry's text
-
v2.1.284
Sandbox no longer keeps npm logs and Claude debug folders writable when you deny reading them
The sandbox's default-writable ~/.npm/_logs and ~/.claude/debug folders now respect denyRead and denied credential files unless allowRead re-allows them
named in this entry, found in this entry's text
-
v2.1.283
One invalid sandbox deny entry now withholds the matching allow rules
If one entry in deniedDomains, denyWrite or denyRead is invalid, Claude Code now withholds the matching allow list instead of applying it
found in this entry's text
-
v2.1.260
New telemetry event tracks sandbox filesystem rule sync completeness
New telemetry tracks completeness of sandbox filesystem rule syncing.
found in this entry's text
-
v2.1.251
A stripped-down sandbox configuration path
The sandbox builder can produce a policy-only mode, but nothing visible switches it on.
found in this entry's text
-
v2.1.224
Runner can refuse repo-committed settings that reach outside the workspace
The runner can warn about or block repo-committed settings that grant access outside the workspace.
found in this entry's text
-
v2.1.77
Sandbox
allowReadSettingfound in this entry's text
First cited
0No release's published evidence quotes this name. The ledger indexes the Evidence lines of every changelog on this site, so this says nobody here has ever quoted it; it says nothing about how old the name is.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.