extract
A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Sandbox credential masking now documents that it falls back to deny on macOS and Windows.
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.221.
In the changelogs
8Releases whose published page names extract.
-
v2.1.268
Sandbox schema additions: MITM proxy domain routing and env-var credential masking with JWT decode
Sandbox config gains schemas for routing traffic through a MITM proxy and masking credentials in environment variables, including JWT handling
found in this entry's text
-
v2.1.236
Skills sync refuses to touch an unsafe root, matching plugins
Skill sync now refuses to write when its root looks unsafe, matching plugin sync.
found in this entry's text
-
v2.1.224
Sandbox credential masking gains JWT handling, per-claim masking and AWS SigV4 re-signing
Sandbox credential masking can fake JWTs, mask single claims, and re-sign AWS requests after swapping keys.
found in this entry's text
-
v2.1.221
Sandbox credential masking documents its platform limits
Sandbox credential masking now documents that it falls back to deny on macOS and Windows.
named in this entry, found in this entry's text
-
v2.1.221
sandbox.credentials.files gains a
maskmode with regex extractionYou can mask secrets in credential files so sandboxed commands see placeholders while real values are swapped in on egress.
named in this entry, found in this entry's text
-
v2.1.216
JWT Credential Masking for Sandbox Environments
found in this entry's text
-
v2.1.208
Credential masking: extract patterns with onExtractNoMatch control
found in this entry's text
-
v2.1.199
Credential Masking: Regex Extract Patterns
found in this entry's text
First cited
0No release's published evidence quotes this name. The ledger indexes the Evidence lines of every changelog on this site, so this says nobody here has ever quoted it; it says nothing about how old the name is.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.