Tell Claude Code which files not to touch

In Claude Code you can define a list of files that shouldn’t be accessed, either globally or per project.

And you should. Keeping files like .env, secret keys and customer data out of the agent’s reach is one of the cheapest security measures there is.