From efc1e30b0d184cfce4b317a0fc02170fd23dadc2 Mon Sep 17 00:00:00 2001
From: Jim Myhrberg <jim@krystal.io>
Date: Wed, 21 Jan 2026 19:52:56 +0000
Subject: [PATCH] feat(claude): deny reading mcp.json files

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 claude/settings.json | 1 +
 1 file changed, 1 insertion(+)

diff --git a/claude/settings.json b/claude/settings.json
index 855c431..cd0a6cf 100644
--- a/claude/settings.json
+++ b/claude/settings.json
@@ -34,6 +34,7 @@
       "Bash(curl:*)",
       "Read(./.env)",
       "Read(./.env*)",
+      "Read(./mcp.json)",
       "Read(./secrets/**)"
     ]
   },