{"name":"deny","slug":"deny","family":"setting","title":"Settings keys","noun":"settings key","description":"Sandbox credential masking now documents that it falls back to deny on macOS and Windows.","description_source":"entry","described_by":{"version":"2.1.221","anchor":"sandbox-credential-masking-documents-its-platform-limits"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.305","anchor":"cloud-only-mcp-host-allowdeny-list-via-tengu-gleaming-creek","heading":"Cloud sessions can allow or block MCP servers by host","line":"In Anthropic cloud sessions, Claude Code can check each MCP server's host against an allow or deny list sent by the server","released_at":"2026-10-20 19:29:36","reason":"found in this entry's text"},{"version":"2.1.281","anchor":"session-permission-rules-can-now-carry-added-directories","heading":"Session permission rules can now carry added directories","line":"Session permission rules can now hold an optional addDirs list next to allow and deny","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text"},{"version":"2.1.269","anchor":"new-plugin-hook-events-sessionattach-sessiondetach-tool","heading":"New plugin hook events: session.attach, session.detach, tool.check","line":"Plugins can now hook into session attach\/detach and tool permission checks","released_at":"2026-09-11 18:12:49","reason":"found in this entry's text"},{"version":"2.1.268","anchor":"sandbox-schema-additions-mitm-proxy-domain-routing-and-env","heading":"Sandbox schema additions: MITM proxy domain routing and env-var credential masking with JWT decode","line":"Sandbox config gains schemas for routing traffic through a MITM proxy and masking credentials in environment variables, including JWT handling","released_at":"2026-09-10 18:41:11","reason":"found in this entry's text"},{"version":"2.1.248","anchor":"mcp-server-allow-and-deny-lists-get-settings-keys","heading":"MCP server allow and deny lists get settings keys","line":"You can allow or block specific MCP servers with allowedMcpServers and deniedMcpServers settings.","released_at":"2026-08-27 20:35:36","reason":"found in this entry's text"},{"version":"2.1.248","anchor":"aws-proxy-request-signing-policies-are-documented-as-fail-cl","heading":"AWS proxy request-signing policies are documented as fail-closed","line":"Three settings control AWS proxy request signing, all defaulting to deny with a 403.","released_at":"2026-08-27 20:35:36","reason":"named in this entry, found in this entry's text"},{"version":"2.1.224","anchor":"sandbox-credential-masking-gains-jwt-handling-per-claim-mask","heading":"Sandbox credential masking gains JWT handling, per-claim masking and AWS SigV4 re-signing","line":"Sandbox credential masking can fake JWTs, mask single claims, and re-sign AWS requests after swapping keys.","released_at":"2026-08-07 01:36:32","reason":"found in this entry's text"},{"version":"2.1.221","anchor":"sandbox-credential-masking-documents-its-platform-limits","heading":"Sandbox credential masking documents its platform limits","line":"Sandbox credential masking now documents that it falls back to deny on macOS and Windows.","released_at":"2026-08-03 22:16:25","reason":"named in this entry, found in this entry's text"},{"version":"2.1.221","anchor":"sandbox-credentials-files-gains-a-mask-mode-with-regex-extra","heading":"sandbox.credentials.files gains a mask mode with regex extraction","line":"You can mask secrets in credential files so sandboxed commands see placeholders while real values are swapped in on egress.","released_at":"2026-08-03 22:16:25","reason":"found in this entry's text"},{"version":"2.1.208","anchor":"credential-masking-extract-patterns-with-onextractnomatch-co","heading":"Credential masking: extract patterns with onExtractNoMatch control","line":null,"released_at":"2026-07-13 21:31:27","reason":"found in this entry's text"}],"entries_total":19,"docs":[{"source":"api","path":"agents-and-tools\/mcp-connector","title":"mcp-connector","documented":false},{"source":"api","path":"api\/beta\/agents","title":"Agents","documented":false},{"source":"api","path":"api\/beta\/agents\/archive","title":"Archive Agent","documented":false},{"source":"api","path":"api\/beta\/agents\/create","title":"Create Agent","documented":false},{"source":"api","path":"api\/beta\/agents\/list","title":"List Agents","documented":false},{"source":"api","path":"api\/beta\/agents\/retrieve","title":"Get Agent","documented":false},{"source":"api","path":"api\/beta\/agents\/update","title":"Update Agent","documented":false},{"source":"api","path":"api\/beta\/agents\/versions","title":"Versions","documented":false},{"source":"api","path":"api\/beta\/agents\/versions\/list","title":"List Agent Versions","documented":false},{"source":"api","path":"api\/beta\/organization\/spend_limits","title":"Spend Limits","documented":false}],"docs_total":12,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/deny","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}