Keep Claude Code away from your .env files with permission deny rules

<p>Claude Code reads files to help you. That is great, until the file is .env, a private key, or a cloud credentials folder. Permission deny rules let you block those reads outright.</p> <h2> Minimal deny list </h2> <p>In .claude/settings.json (shared with the team) or settings.local.json (personal), add these entries under permissions.deny:</p> <ul> <li>Read(./.env)</li> <li>Read(./.env.*)</li> <

Read the source →