sandbox.credentials
A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Hide or mask credential files and variables inside the sandbox
Anthropic's own wording. Read off All settings, captured 2026-10-22.
In the changelogs
8Releases whose published page names sandbox.credentials.
-
v2.1.301
Sandbox credential settings errors are now checked separately
Problems in sandbox and sandbox.credentials settings, including warnings, are now judged by their own check for whether they stop settings from loading
found in this entry's text
-
v2.1.281
Sandbox credentials: masks from an eval-confined foreign settings tier are downgraded
Credential masks from an eval-confined foreign settings tier are now treated as untrusted and can never grant proxy injection
found in this entry's text, named in this entry
-
v2.1.246
Disabled settings files no longer feed rules into the sandbox
Rules from settings files you disabled no longer sneak into the sandbox policy.
named in this entry, found in this entry's text
-
v2.1.224
Invalid sandbox credential settings now fail closed instead of being ignored
A malformed sandbox.credentials block now denies everything instead of quietly disabling protection.
named in this entry, found in this entry's text
-
v2.1.224
Sandbox credential masking gains JWT handling, per-claim masking and AWS SigV4 re-signing
Sandbox credential masking can fake JWTs, mask single claims, and re-sign AWS requests after swapping keys.
named in this entry, found in this entry's text
-
v2.1.216
JWT Credential Masking for Sandbox Environments
found in this entry's text
-
v2.1.216
Credential Sentinels Now Substituted in Request Bodies
found in this entry's text
-
v2.1.187
sandbox.credentials— Credential protection in sandboxfound in this entry's text
First cited
1The earliest release whose published evidence quoted sandbox.credentials was v2.1.187, 23 Jun 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.