What
A new list names environment variables that point at credential and config files: AWS, Azure, GCP, Kubernetes, Docker, git, pip, Postgres, Vault, Consul, Nomad, Terraform, gpg, npm and gh, plus CLAUDE_ENV_FILE, CLAUDE_CODE_FEDERATION_CACHE_DIR and ANTHROPIC_IDENTITY_TOKEN_FILE.
Details
- It sits beside the existing proxy environment and temp-directory allowlists in the sandbox permission-scoping code, which suggests it decides which credential paths get special treatment under sandboxed execution.
- No function in this build reads the list, so nothing acts on it yet.
Evidence
CLOUDSDK_AUTH_ACCESS_TOKEN_FILE
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Names in the bundleCLAUDE_ENV_FILE
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up CLAUDE_ENV_FILE, on Hooks reference.
Setup hooks have access to `CLAUDE_ENV_FILE`. Variables written to that file persist into subsequent Bash commands for the session, just as in [SessionStart hooks](#persist-environment-variables). Only `type: "command"` hooks run on `Setup…hooks see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up CLAUDE_ENV_FILE, on Hooks reference.