{"name":"sandbox.credentials","slug":"sandbox-credentials","family":"setting","title":"Settings keys","noun":"settings key","description":"Hide or mask credential files and variables inside the [sandbox](\/docs\/en\/sandboxing.md#protect-credentials)","description_source":"docs","described_by":{"doc":"claude-code\/settings-reference","title":"All settings"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.309","builds":0,"mined_builds":150,"first_cited":{"version":"2.1.187","released_at":"2026-06-23 17:55:41","spans":1}},"aliases":[],"entries":[{"version":"2.1.301","anchor":"settings-validation-sandboxcredentials-warnings-now-handle","heading":"Sandbox credential settings errors are now checked separately","line":"Problems in sandbox and sandbox.credentials settings, including warnings, are now judged by their own check for whether they stop settings from loading","released_at":"2026-10-15 14:34:23","reason":"found in this entry's text"},{"version":"2.1.281","anchor":"sandbox-credentials-masks-from-an-eval-confined-foreign-set","heading":"Sandbox credentials: masks from an eval-confined foreign settings tier are downgraded","line":"Credential masks from an eval-confined foreign settings tier are now treated as untrusted and can never grant proxy injection","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text, named in this entry"},{"version":"2.1.246","anchor":"disabled-settings-files-no-longer-feed-rules-into-the-sandbo","heading":"Disabled settings files no longer feed rules into the sandbox","line":"Rules from settings files you disabled no longer sneak into the sandbox policy.","released_at":"2026-08-25 19:17:34","reason":"named in this entry, found in this entry's text"},{"version":"2.1.224","anchor":"invalid-sandbox-credential-settings-now-fail-closed-instead-","heading":"Invalid sandbox credential settings now fail closed instead of being ignored","line":"A malformed sandbox.credentials block now denies everything instead of quietly disabling protection.","released_at":"2026-08-07 01:36:32","reason":"named in this entry, found in this entry's text"},{"version":"2.1.224","anchor":"sandbox-credential-masking-gains-jwt-handling-per-claim-mask","heading":"Sandbox credential masking gains JWT handling, per-claim masking and AWS SigV4 re-signing","line":"Sandbox credential masking can fake JWTs, mask single claims, and re-sign AWS requests after swapping keys.","released_at":"2026-08-07 01:36:32","reason":"named in this entry, found in this entry's text"},{"version":"2.1.216","anchor":"jwt-credential-masking-for-sandbox-environments","heading":"JWT Credential Masking for Sandbox Environments","line":null,"released_at":"2026-07-20 20:19:37","reason":"found in this entry's text"},{"version":"2.1.216","anchor":"credential-sentinels-now-substituted-in-request-bodies","heading":"Credential Sentinels Now Substituted in Request Bodies","line":null,"released_at":"2026-07-20 20:19:37","reason":"found in this entry's text"},{"version":"2.1.187","anchor":"sandbox-credentials-credential-protection-in-sandbox","heading":"sandbox.credentials \u2014 Credential protection in sandbox","line":null,"released_at":"2026-06-23 17:55:41","reason":"found in this entry's text"}],"entries_total":8,"docs":[{"source":"claude-code","path":"settings-reference","title":"All settings","documented":true},{"source":"claude-code","path":"agent-sdk\/claude-code-features","title":"Use Claude Code features in the SDK","documented":false},{"source":"claude-code","path":"changelog","title":"Claude Code changelog","documented":false},{"source":"claude-code","path":"claude-apps-gateway","title":"Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry","documented":false},{"source":"claude-code","path":"managed-settings","title":"Deploy managed settings","documented":false},{"source":"claude-code","path":"sandboxing","title":"Configure the sandboxed Bash tool","documented":false},{"source":"claude-code","path":"server-managed-settings","title":"Configure server-managed settings","documented":false},{"source":"claude-code","path":"settings","title":"Claude Code settings","documented":false},{"source":"claude-code","path":"whats-new\/2026-w26","title":"Week 26 \u00b7 June 22\u201326, 2026","documented":false}],"docs_total":9,"gates":[],"related":[{"name":"sandbox","slug":"sandbox","description":"[Isolate Bash commands](\/docs\/en\/sandboxing.md) from your filesystem and network on macOS, Linux, and WSL2"},{"name":"sandbox.allowNestedUserNamespaces","slug":"sandbox-allownestedusernamespaces","description":"Let [sandboxed](\/docs\/en\/sandboxing.md#chromium-or-rootless-podman-fails-inside-the-sandbox-on-linux) commands create user namespaces on Linux and WSL2"},{"name":"sandbox.bwrapPath","slug":"sandbox-bwrappath","description":"Point the [sandbox](\/docs\/en\/sandboxing.md) at a bubblewrap binary outside `PATH`"},{"name":"sandbox.credentials.awsPairs","slug":"sandbox-credentials-awspairs","description":"Link custom-named AWS key variables into one credential for [re-signing](\/docs\/en\/sandboxing.md#re-sign-aws-requests)"},{"name":"sandbox.credentials.files","slug":"sandbox-credentials-files","description":"Block or mask reads of a credential file inside the [sandbox](\/docs\/en\/sandboxing.md#mask-credential-files)"},{"name":"sandbox.enabled","slug":"sandbox-enabled","description":"Turn on [Bash sandboxing](\/docs\/en\/sandboxing.md#get-started) on macOS, Linux, and WSL2"},{"name":"sandbox.excludedCommands","slug":"sandbox-excludedcommands","description":"Name commands Claude Code can run outside the [sandbox](\/docs\/en\/sandboxing.md)"},{"name":"sandbox.failIfUnavailable","slug":"sandbox-failifunavailable","description":"Refuse to start when the [sandbox](\/docs\/en\/sandboxing.md) can't, instead of running unsandboxed"},{"name":"sandbox.filesystem","slug":"sandbox-filesystem","description":"Control which paths [sandboxed](\/docs\/en\/sandboxing.md#filesystem-isolation) commands can read and write"},{"name":"sandbox.filesystem.allowRead","slug":"sandbox-filesystem-allowread","description":"Re-open reading inside a region [`denyRead`](#sandbox-filesystem-denyread) blocks"}],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/sandbox-credentials","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}