Follow Discord
Sweep 03 Nov 2026 · 22:27Z Build v2.1.318 536 read Stable v2.1.311 Latest v2.1.318 Next v2.1.318 Feeds RSS JSON llms.txt llms-full.txt Unofficial
Home / Reference / Settings keys

denyWrite

setting never mined JSON

A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.

If one entry in deniedDomains, denyWrite or denyRead is invalid, Claude Code now withholds the matching allow list instead of applying it

Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.283.

First seen — never in a mined build
Last seen — never in a mined build
Builds0 / 158on this box, as of v2.1.318
Written about v2.1.186 first named in a changelog, 22 Jun 2026

In the changelogs

6

Releases whose published page names denyWrite.

  1. v2.1.317
    Sandbox stops following some symlinks in write-protected paths

    Behind a server switch, the sandbox no longer follows a write-protected symlink that points at another host or cannot be safely checked

    named in this entry, found in this entry's text

  2. v2.1.304
    Sandbox blocks on credential files now win over broader allow rules

    Sandbox allow rules no longer reopen blocked credential files, and the network proxy gains stricter options

    found in this entry's text

  3. v2.1.304
    Sandbox credential paths are now kept apart from other read restrictions

    Sandbox block lists are now built in one shared place, and credential paths stay in their own list instead of joining denyRead

    found in this entry's text

  4. v2.1.283
    One invalid sandbox deny entry now withholds the matching allow rules

    If one entry in deniedDomains, denyWrite or denyRead is invalid, Claude Code now withholds the matching allow list instead of applying it

    found in this entry's text

  5. v2.1.198
    Windows Sandbox: Per-Exec Deny Flags

    found in this entry's text

  6. v2.1.186

    found in this entry's text

First cited

1

The earliest release whose published evidence quoted denyWrite was v2.1.317, 2 Nov 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.

ReleaseDateThe span that was quoted
v2.1.3172 Nov 2026points at another host or cannot be checked without following it; not resolved, its own denyWrite entry stands

Presence across releases

0

The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.

Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.

Feedback