injectHosts
A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
You can mask secrets in credential files so sandboxed commands see placeholders while real values are swapped in on egress.
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.221.
In the changelogs
7Releases whose published page names injectHosts.
-
v2.1.281
Sandbox credentials: masks from an eval-confined foreign settings tier are downgraded
Credential masks from an eval-confined foreign settings tier are now treated as untrusted and can never grant proxy injection
found in this entry's text
-
v2.1.268
Sandbox schema additions: MITM proxy domain routing and env-var credential masking with JWT decode
Sandbox config gains schemas for routing traffic through a MITM proxy and masking credentials in environment variables, including JWT handling
found in this entry's text
-
v2.1.229
IPv6 addresses in sandbox network rules must be bracketed
Write IPv6 addresses in sandbox rules in bracketed, canonical form or enforcement gets conservative.
named in this entry, found in this entry's text
-
v2.1.229
Two new sandbox diagnostics for IPv6 misconfiguration
claude doctornow flags badly written IPv6 entries in your sandbox network rules.named in this entry, found in this entry's text
-
v2.1.224
Sandbox AWS credential pairs get precedence rules and scope warnings
Conflicting AWS credential pairs in the sandbox now resolve predictably and warn about risky setups.
found in this entry's text
-
v2.1.221
sandbox.credentials.files gains a
maskmode with regex extractionYou can mask secrets in credential files so sandboxed commands see placeholders while real values are swapped in on egress.
found in this entry's text
-
v2.1.221
claude doctorreports sandbox credential-mask problemsclaude doctor now lists each sandbox credential-masking problem separately with a specific fix.
found in this entry's text
First cited
1The earliest release whose published evidence quoted injectHosts was v2.1.229, 12 Aug 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.