#deny

Stop Claude Code reading your .env with a Read deny rule

A Read deny rule is the reliable way to keep .env out of the model's input. How to write the pattern, how depth and anchoring change its reach, and where deny stops working.