permissions.deny
A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Block listed tool uses, including reads of files that hold secrets
Anthropic's own wording. Read off All settings, captured 2026-11-12.
In the changelogs
2Releases whose published page names permissions.deny.
-
v2.1.323
Tools blocked by your deny rules are now removed from a security hook's tool list
A built-in security hook now strips any tool matching
permissions.deny, including whole MCP servers, from the tool listfound in this entry's text, named in this entry
-
v2.1.282
Managed deny and ask lists made entirely of broken rules are now flagged
A managed deny or ask list whose rules are all invalid is now marked unreadable rather than quietly treated as empty
named in this entry, found in this entry's text
First cited
0No release's published evidence quotes this name. The ledger indexes the Evidence lines of every changelog on this site, so this says nobody here has ever quoted it; it says nothing about how old the name is.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.