allowWrite
A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
The sandbox builder can produce a policy-only mode, but nothing visible switches it on.
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.251.
In the changelogs
12Releases whose published page names allowWrite.
-
v2.1.323
Sandbox withholds write access to paths that could be redirected
The Windows and Linux sandbox now refuses an allowWrite grant whose path leads elsewhere or to nothing yet, and logs why
found in this entry's text, named in this entry
-
v2.1.323
Sandbox write rules now include extra rules from the filesystem settings
The sandbox now builds extra rules from your whole filesystem configuration, in addition to its allowWrite and denyWrite lists
found in this entry's text, named in this entry
-
v2.1.304
Sandbox blocks on credential files now win over broader allow rules
Sandbox allow rules no longer reopen blocked credential files, and the network proxy gains stricter options
found in this entry's text
-
v2.1.285
Sandbox drops read and write paths that were re-linked after setup
Sandbox
allowReadandallowWritepaths re-pointed by a link after setup are now checked again and dropped if unsafe or pointing into a denied pathfound in this entry's text, named in this entry
-
v2.1.285
Sandbox ignores some project-level file access grants
Project and local settings can no longer widen sandbox file access when an admin requires the sandbox or the path is under a denied read path
found in this entry's text
-
v2.1.285
Risky sandbox grants committed in a repository are now withheld
With
blockReadsOutsideWorkingDirectorieson, a repository'sallowReadandallowWritegrants are withheld if they are globs, network paths or risky symlinksfound in this entry's text, named in this entry
-
v2.1.284
Linux sandbox warning now also flags broad read rules
On Linux, the sandbox glob warning now also checks
filesystem.denyReadandfilesystem.allowReadpatterns that start at the root or have no fixed folderfound in this entry's text
-
v2.1.284
Sandbox read and write rules are now worked out together
Paths Claude's sandbox may write to are now worked out from
denyRead,allowReadand credentials togethernamed in this entry, found in this entry's text
-
v2.1.283
One invalid sandbox deny entry now withholds the matching allow rules
If one entry in deniedDomains, denyWrite or denyRead is invalid, Claude Code now withholds the matching allow list instead of applying it
found in this entry's text
-
v2.1.281
Git bundle upload refuses checkouts under a home directory that is itself a git checkout
Cloud-session git upload now refuses or hardens checkouts sitting under a home directory that is itself a git repository
found in this entry's text
-
v2.1.251
A stripped-down sandbox configuration path
The sandbox builder can produce a policy-only mode, but nothing visible switches it on.
found in this entry's text
-
v2.1.198
Windows Sandbox: Per-Exec Deny Flags
found in this entry's text
First cited
0No release's published evidence quotes this name. The ledger indexes the Evidence lines of every changelog on this site, so this says nobody here has ever quoted it; it says nothing about how old the name is.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.