Protected Paths - Claude Code
Auto-guarded directories like .git, .claude, and .vscode.
Protected paths are directories Claude Code refuses to modify without explicit, targeted approval - even in bypass mode.
What it does
.git, .claude, .vscode, and similar metadata directories are guarded by default. Edits or writes to anything inside them require a specific permission grant, not a blanket allow. It's a structural safety net - you can't accidentally rewrite your git history or clobber your Claude config by running a wide prompt.
When to use it
- Always. Protected paths are on by default and you should leave them on.
- Add your own sensitive paths to the guard list for project-specific safety.
- Pair with audit logging to catch attempts even when denied.
- Keep the guard in place even for trusted agents - the defense layers compound.
Gotchas
- Some legitimate workflows need to touch
.git(tools that rewrite hooks, for example). Grant tightly scoped rules for those. - Protected paths don't prevent reads. Claude can still see what's there.
- Custom protected paths live in settings. Changes apply on session restart.
Official docs: https://code.claude.com/docs/en/permission-modes.md#protected-paths
Technical content at the intersection of AI and development. Building with AI agents, Claude Code, and modern dev tools - then showing you exactly how it works.
Was this helpful?
Related Guides
Related Tools
Claude Code
Anthropic's agentic coding CLI. Runs in your terminal, edits files autonomously, spawns sub-agents, and maintains memory...
View ToolCodeburn
Interactive TUI dashboard that shows exactly where your Claude Code and Cursor tokens are going, in real time.
View Tool
Claude Opus 4.7
Anthropic's flagship reasoning model. Best-in-class for coding, long-context analysis, and agentic workflows. 1M token c...
View ToolConductor
Mac app for running parallel Claude Code, Codex, and Cursor agents in isolated workspaces. Watch every agent work at onc...
View ToolRelated Videos
Generate Videos in Codex + Claude Code with This...
Check out HeyGen! https://heygen.1stcollab.com/developersdigest The video introduces HeyGen, an AI video generation platform with a rich API and a CLI that lets developers create, fetch, and manipula...
10x Design in Claude Code and Codex
Try Higgsfield: https://higgsfield.ai/s/higgsfield-general-campaign-developersdigest-juDMTi AI coding agents can build entire websites in minutes, but the default results often still look generic and...
Self Improving Applications with Claude Code & Codex
Build a Self‑Improving Next.js App: Supabase + Vercel Eve + GitHub Issues + Agent Loops Check out Supabase: https://supabase.plug.dev/1wWOTGS The video demonstrates how to build and deploy a self-im...
Related Posts
Claude Outages Are a Workflow Design Problem
Claude outages and 529 overloads expose whether your AI coding workflow has checkpoints, receipts, model-switch paths, a...
Claude Opus 4.8 Is an Agent Honesty Release
Claude Opus 4.8 looks like a benchmark bump, but the developer story is better honesty, dynamic workflows, and effort co...
Anthropic Sonnet 4.5 in Claude Code
Anthropic's Claude Sonnet 4.5 isn't just another model increment. The company claims they've observed it maintaining foc...
Make Your Coding Agents Talk: Voice Summaries with the Rime CLI
The Rime CLI streams natural-sounding text-to-speech straight from your terminal, so Claude Code, Codex, Devin, and Open...
How to Make Claude Code 10x Better at Design: Image and Video Assets From the Agent Loop
Claude Code and Codex can build a website in minutes, but the result often looks generic and obviously AI-generated. Hig...
Don't Paste the AI vs Vomit vs NoBuzz: AI Slop Tools Compared
dontpastetheai.com, Vomit, and NoBuzz hit Hacker News in the same week. A social contract, a local rewrite, and a second...
