credentials.envVars
A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Sandbox credential masking adds JWT decoding, per-claim masking, and scrubbing of duplicate secret values
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.268.
In the changelogs
4Releases whose published page names credentials.envVars.
-
v2.1.296
The sandbox option now merges with your settings instead of replacing them
Sandbox options passed in now merge with your sandbox settings, deny lists add up, and failIfUnavailable defaults to true
found in this entry's text
-
v2.1.268
Sandbox-runtime credential masking gains JWT decoding, claim-level masking, and duplicate-value scrubbing
Sandbox credential masking adds JWT decoding, per-claim masking, and scrubbing of duplicate secret values
named in this entry, found in this entry's text
-
v2.1.216
JWT Credential Masking for Sandbox Environments
found in this entry's text
-
v2.1.208
Credential masking: extract patterns with onExtractNoMatch control
found in this entry's text
First cited
1The earliest release whose published evidence quoted credentials.envVars was v2.1.208, 13 Jul 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.