Claude-Code-initial-setting-files

claude-code-settings-local.json

{
  "enableAllProjectMcpServers": true,
  "enabledMcpjsonServers": [
    "textlint",
    "dbt"
  ],
  "permissions": {
    "allow": [
      "WebFetch(domain:docs.anthropic.com)"
    ]
  },
  "statusLine": {
      "type": "command",
      "command": "npx ccusage@latest statusline"
  }
}

claude-code-settings.json

{
    "includeCoAuthoredBy": false,
    "cleanupPeriodDays": 30,
    "permissions": {
      "allow": [
        "Bash(cat:*)",
        "Bash(cd:*)",
        "Bash(cp:*)",
        "Bash(docker:*)",
        "Bash(gh:*)",
        "Bash(git:*)",
        "Bash(ls:*)",
        "Bash(mkdir:*)",
        "Bash(mv:*)",
        "Bash(pwd:*)",
        "Bash(python:*)",
        "Read(**)"
      ],
      "deny": [
        "Bash(>> /dev/*)",
        "Bash(> /dev/*)",
        "Bash(brew install *)",
        "Bash(chmod 777 *)",
        "Bash(chown root:*)",
        "Bash(curl * | bash)",
        "Bash(curl * | sh)",
        "Bash(curl:*)",
        "Bash(dd:*)",
        "Bash(docker:* --privileged *)",
        "Bash(docker:exec * sh)",
        "Bash(docker:exec * bash)",
        "Bash(docker:exec * /bin/sh)",
        "Bash(docker:exec * /bin/bash)",
        "Bash(docker:run * --privileged *)",
        "Bash(docker:run * -v /*:*)",
        "Bash(docker:run * -v /bin:*)",
        "Bash(docker:run * -v /boot:*)",
        "Bash(docker:run * -v /dev:*)",
        "Bash(docker:run * -v /etc:*)",
        "Bash(docker:run * -v /home:*)",
        "Bash(docker:run * -v /lib:*)",
        "Bash(docker:run * -v /opt:*)",
        "Bash(docker:run * -v /proc:*)",
        "Bash(docker:run * -v /root:*)",
        "Bash(docker:run * -v /sbin:*)",
        "Bash(docker:run * -v /sys:*)",
        "Bash(docker:run * -v /tmp:*)",
        "Bash(docker:run * -v /usr:*)",
        "Bash(docker:run * -v /var:*)",
        "Bash(docker:run * --cap-add=SYS_ADMIN *)",
        "Bash(docker:run * --security-opt seccomp=unconfined *)",
        "Bash(docker:run * --security-opt apparmor=unconfined *)",
        "Bash(docker system prune -af)",
        "Bash(fdisk:*)",
        "Bash(git commit:*)",
        "Bash(git config *)",
        "Bash(git push --force-with-lease origin main)",
        "Bash(git push -f origin main)",
        "Bash(git push:*)",
        "Bash(git rebase:*)",
        "Bash(git reset:*)",
        "Bash(gh repo delete:*",
        "Bash(git pull origin main)",
        "Bash(git pull origin main --rebase)",
        "Bash(git pull origin main --ff-only)",
        "Bash(git pull origin main --ff-only --rebase)",
        "Bash(git pull origin main --ff-only --rebase --force)",
        "Bash(git pull origin main --ff-only --rebase --force-with-lease)",
        "Bash(mkfs:*)",
        "Bash(mongod:*)",
        "Bash(mysql:*)",
        "Bash(nc:*)",
        "Bash(npm remove:*)",
        "Bash(npm uninstall:*)",
        "Bash(psql:*)",
        "Bash(rm -rf .git)",
        "Bash(rm -rf /*)",
        "Bash(rm -rf /)",
        "Bash(rm -rf:*)",
        "Bash(rm -rf ~)",
        "Bash(rm:*)",
        "Bash(sudo -i:*)",
        "Bash(sudo chmod 777:*)",
        "Bash(sudo chown:*)",
        "Bash(sudo dd:*)",
        "Bash(sudo fdisk:*)",
        "Bash(sudo mkfs:*)",
        "Bash(sudo mount:*)",
        "Bash(sudo rm:*)",
        "Bash(sudo su:*)",
        "Bash(sudo umount:*)",
        "Bash(sudo:*)",
        "Bash(sudo:*passwd*)",
        "Bash(sudo:*shadow*)",
        "Bash(wget * | bash)",
        "Bash(wget * | sh)",
        "Bash(wget:*)",
        "Edit(/bin/**)",
        "Edit(/boot/**)",
        "Edit(/dev/**)",
        "Edit(/etc/**)",
        "Edit(/etc/passwd)",
        "Edit(/etc/shadow)",
        "Edit(/etc/sudoers)",
        "Edit(/lib/**)",
        "Edit(/lib64/**)",
        "Edit(/opt/**)",
        "Edit(/proc/**)",
        "Edit(/sbin/**)",
        "Edit(/sys/**)",
        "Edit(/usr/**)",
        "Edit(/var/**)",
        "Edit(~/.ssh/*_ecdsa)",
        "Edit(~/.ssh/*_ed25519)",
        "Edit(~/.ssh/*_rsa)",
        "Edit(~/.ssh/id_*)",
        "Read(.env.*)",
        "Read(**/*key*)",
        "Read(**/*token*)",
        "Read(id_ed25519)",
        "Read(id_rsa)",
        "Write(.env*)",
        "Write(/bin/**)",
        "Write(/boot/**)",
        "Write(/dev/**)",
        "Write(/etc/**)",
        "Write(/etc/passwd)",
        "Write(/etc/shadow)",
        "Write(/etc/sudoers)",
        "Write(/lib/**)",
        "Write(/lib64/**)",
        "Write(/opt/**)",
        "Write(/proc/**)",
        "Write(/sbin/**)",
        "Write(/sys/**)",
        "Write(/usr/**)",
        "Write(/var/**)",
        "Write(**/secrets/**)",
        "Write(~/.ssh/*_ecdsa)",
        "Write(~/.ssh/*_ed25519)",
        "Write(~/.ssh/*_rsa)",
        "Write(~/.ssh/id_*)"
      ]
    }
  }