Claude Discovery

← All discoveries

Close-up of a smartphone wrapped in a chain with a padlock, symbolizing strong security.
Photo by Towfiqu barbhuiya on Pexels
tool

One Flag, No Bash, No Bypass: Claude Code 2.1.248's Lockdown Mode

2026-08-27 ยท source:

Claude Code 2.1.248 adds a --restricted flag that removes command and code execution tools and WebFetch, confines file tools to the working directory, refuses bypassPermissions, and ignores local settings files.

What it is

A new release of Claude Code, Anthropic's CLI coding agent, adding a `--restricted` flag (or `CLAUDE_CODE_RESTRICTED=1` env var) alongside other changes like per-agent prompt cache TTLs and a self-hosted-runner client label override.

What it does

With `--restricted` set, Claude Code strips out the built-in tools that run commands or code plus `WebFetch` (unless explicitly named in `--tools`), keeps file tools scoped to the working directory, refuses to honor `bypassPermissions`, and ignores user, project, and local settings files that might otherwise loosen those constraints.

Why it matters

It gives operators a single hard-to-override flag for running Claude Code in genuinely locked-down contexts, useful for CI, shared environments, or anywhere you don't trust the surrounding settings files to stay untampered.

How to use it

Pass `--restricted` on the command line or set `CLAUDE_CODE_RESTRICTED=1` before launching a session; add specific tools back explicitly via `--tools` if a restricted session still needs one of them.

Go to source →
claude-codesecuritycli
Related discoveries
Laptop displaying a security lock icon on a table with a potted plant and clock.
tool

Claude Code v2.1.211: forwarded subagent text and hardened permission-preview rendering

Claude Code v2.1.211 adds a flag to forward subagent text and thinking into stream-json output and strips hidden characters attackers could use to spoof permission-approval prompts.
Close-up of wooden Scrabble tiles spelling SECURITY, symbolizing cybersecurity and protection.
tool

gateway.yaml Pricing Now Flows Straight Into Claude Code's /cost

Claude Code 2.1.268 lets administrators set custom rates in gateway.yaml so /cost and telemetry match the organization's actual spend meter, plus a startup warning when a gateway's allowed CIDR list is empty.
A classic MS-DOS terminal screen displayed on a laptop keyboard with vivid illumination.
tool

Claude Code 2.1.260 Adds a Live Diff Panel and Prompt-Cache Miss Reasons

Claude Code 2.1.260 adds a toggleable diff panel showing uncommitted changes beside the conversation and surfaces the likely cause of prompt-cache misses in /cost and the status line.