sandbox.filesystem
A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Control which paths sandboxed commands can read and write
Anthropic's own wording. Read off All settings, captured 2026-10-22.
In the changelogs
4Releases whose published page names sandbox.filesystem.
-
v2.1.301
Sandbox credential settings errors are now checked separately
Problems in sandbox and sandbox.credentials settings, including warnings, are now judged by their own check for whether they stop settings from loading
found in this entry's text
-
v2.1.283
One invalid sandbox deny entry now withholds the matching allow rules
If one entry in deniedDomains, denyWrite or denyRead is invalid, Claude Code now withholds the matching allow list instead of applying it
found in this entry's text, named in this entry
-
v2.1.246
Disabled settings files no longer feed rules into the sandbox
Rules from settings files you disabled no longer sneak into the sandbox policy.
named in this entry, found in this entry's text
-
v1.0.124
Sandboxed Bash Mode (
-sb/--sandboxed-bash)found in this entry's text
First cited
1The earliest release whose published evidence quoted sandbox.filesystem was v2.1.246, 25 Aug 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.