surshar / claude-code

Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

Built by Anthropic · github.com/anthropics

docs: example settings filesBrowse files

Kurt Carpenter authored on Jan 31, 2026 parent 74cc597 · commit f93f614768c9

4 changed files+68 -0compared with 74cc597

Aexamples/settings/README.md

Aexamples/settings/settings-bash-sandbox.json

Aexamples/settings/settings-lax.json

Aexamples/settings/settings-strict.json

Aexamples/settings/README.md+31 -0

		@@ -1,0 +1,31 @@
	1	+# Settings Examples
	2	+
	3	+Example Claude Code settings files, primarily intended for organization-wide deployments. Use these are starting points — adjust them to fit your needs.
	4	+
	5	+These may be applied at any level of the [settings hierarchy](https://code.claude.com/docs/en/settings#settings-files), though certain properties only take effect if specified in enterprise settings (e.g. `strictKnownMarketplaces`, `allowManagedHooksOnly`, `allowManagedPermissionRulesOnly`).
	6	+
	7	+
	8	+## Configuration Examples
	9	+
	10	+> [!WARNING]
	11	+> These examples are community-maintained snippets which may be unsupported or incorrect. You are responsible for the correctness of your own settings configuration.
	12	+
	13	+\| Setting \| [`settings-lax.json`](./settings-lax.json) \| [`settings-strict.json`](./settings-strict.json) \| [`settings-bash-sandbox.json`](./settings-bash-sandbox.json) \|
	14	+\|---------\|:---:\|:---:\|:---:\|
	15	+\| Disable `--dangerously-skip-permissions` \| ✅ \| ✅ \| \|
	16	+\| Block plugin marketplaces \| ✅ \| ✅ \| \|
	17	+\| Block user and project-defined permission `allow` / `ask` / `deny` \| \| ✅ \| ✅ \|
	18	+\| Block user and project-defined hooks \| \| ✅ \| \|
	19	+\| Deny web fetch and search tools \| \| ✅ \| \|
	20	+\| Bash tool requires approval \| \| ✅ \| \|
	21	+\| Bash tool must run inside of sandbox \| \| \| ✅ \|
	22	+
	23	+## Tips
	24	+- Consider merging snippets of the above examples to reach your desired configuration
	25	+- Settings files must be valid JSON
	26	+- Before deploying configuration files to your organization, test them locally by applying to `managed-settings.json`, `settings.json` or `settings.local.json`
	27	+- The `sandbox` property only applies to the `Bash` tool; it does not apply to other tools (like Read, Write, WebSearch, WebFetch, MCPs), hooks, or internal commands
	28	+
	29	+## Full Documentation
	30	+
	31	+See https://code.claude.com/docs/en/settings for complete documentation on all available managed settings.

Aexamples/settings/settings-bash-sandbox.json+16 -0

		@@ -1,0 +1,16 @@
	1	+{
	2	+ "allowManagedPermissionRulesOnly": true,
	3	+ "sandbox": {
	4	+ "enabled": true,
	5	+ "autoAllowBashIfSandboxed": false,
	6	+ "allowUnsandboxedCommands": false,
	7	+ "excludedCommands": [],
	8	+ "network": {
	9	+ "allowUnixSockets": [],
	10	+ "allowLocalBinding": false,
	11	+ "httpProxyPort": null,
	12	+ "socksProxyPort": null
	13	+ },
	14	+ "enableWeakerNestedSandbox": false
	15	+ }
	16	+}

Aexamples/settings/settings-lax.json+6 -0

		@@ -1,0 +1,6 @@
	1	+{
	2	+ "permissions": {
	3	+ "disableBypassPermissionsMode": "disable"
	4	+ },
	5	+ "strictKnownMarketplaces": []
	6	+}

Aexamples/settings/settings-strict.json+15 -0

		@@ -1,0 +1,15 @@
	1	+{
	2	+ "permissions": {
	3	+ "disableBypassPermissionsMode": "disable",
	4	+ "ask": [
	5	+ "Bash"
	6	+ ],
	7	+ "deny": [
	8	+ "WebSearch",
	9	+ "WebFetch"
	10	+ ]
	11	+ },
	12	+ "allowManagedPermissionRulesOnly": true,
	13	+ "allowManagedHooksOnly": true,
	14	+ "strictKnownMarketplaces": []
	15	+}