Does Claude Code honor .claudeignore?

Not by itself. Claude Code enforces permission rules, so copy the sensitive paths into permissions.deny in .claude/settings.json, for example Read(./.env). Keep .claudeignore in the repository root as the reviewable list.

What should I put in .claudeignore?

Exclude large build caches, minified bundles, lockfiles, and environment files containing sensitive credentials.

Target Standard & File Format

Select runtime specification

AI Agent Rules & Skills

Context Shields & Privacy (Ignore Files)

Integrations & Machine Documentation

AI Governance & Multi-Agent Planning Suite

.claudeignore Shield

Define boundary exclusions for Claude Code CLI to guard credentials and reduce prompt bloat:

Shield Protection ProfileFull Protection

Tokens Saved / Turn

~190k tokens

Secret Leak Guards

2 Active Guards

Shield Categories

8 of 8 Enabled

Indexing Boundary Categories

Select active exclusions

Toggle specific categories to mask secrets and exclude heavy artifacts:

Secrets & Local Credentials~5k tokens

Masks .env files, private keys, SSL certs, service accounts, and API credentials from AI indexers.

Dependency Bloat & Lockfiles~60k tokens

Excludes node_modules, vendor directories, and massive lockfiles (package-lock, yarn, pnpm, Cargo).

Build Outputs & Framework Caches~35k tokens

Filters out dist/, build/, out/, .next/, .turbo/, .cache/, and compiled bytecode artifacts.

Media & Heavy Binary Blobs~20k tokens

Omits raster images (png, jpg, webp), audio/video, fonts, zip archives, and wasm binaries.

Logs & Diagnostic Traces~15k tokens

Blocks test coverage reports (coverage/, .nyc_output/) and verbose npm/yarn/pnpm debug logs.

IDE Configurations & OS Metadata~5k tokens

Strips .idea/, .vscode/, editor swap files, .DS_Store, and Windows Thumbs.db files.

Database Dumps & Local Storage~30k tokens

Guards raw database dumps (*.sql, *.dump), SQLite database files, and journal files (*.db, *.db-wal).

Test Fixtures & Heavy Snapshots~20k tokens

Skips bloated mock JSON payloads, large test fixture folders, and verbose test snapshots.

Custom Rules & Negate Exceptions

Append repo-specific file globs or re-include allowed files with negation patterns (!path):

.claudeignore104 lines

# .claudeignore - Claude Code CLI Privacy & Boundary Protection
# Prevents Claude Code CLI from indexing and modifying sensitive credentials, build caches, and bulky lockfiles.
# Keeping your agent boundary clean improves reasoning quality and prevents data leaks.

# --- Critical: Secrets & Local Credentials ---
.env
.env.*
!.env.example
*.pem
*.key
*.cert
*.crt
id_rsa*
secrets/
credentials/
service-account*.json
*.p12
*.pfx
*.keystore

# --- Dependency Bloat & Massive Lockfiles (Saves 50k+ tokens) ---
node_modules/
vendor/
package-lock.json
pnpm-lock.yaml
yarn.lock
bun.lockb
poetry.lock
Pipfile.lock
Cargo.lock
composer.lock
go.sum

# --- Build Artifacts, Bundler & Framework Caches ---
dist/
build/
out/
.cache/
*.tsbuildinfo
__pycache__/
*.py[cod]
*$py.class
.venv/
venv/
env/
.pytest_cache/
.mypy_cache/
.ruff_cache/
*.egg-info/

# --- Large Binary Files & Media (Never needed by LLM) ---
*.png
*.jpg
*.jpeg
*.gif
*.ico
*.webp
*.mp4
*.webm
*.mp3
*.wav
*.zip
*.tar.gz
*.tgz
*.rar
*.7z
*.pdf
*.wasm

# --- Test Coverage & Debug Logs ---
coverage/
.nyc_output/
*.lcov
*.log
npm-debug.log*
yarn-debug.log*
pnpm-debug.log*
yarn-error.log*

# --- Editor Metadata & OS Caches ---
.idea/
.vscode/
*.swp
*.swo
*~
.DS_Store
Thumbs.db

# --- Database Dumps & Local SQLite Storage ---
*.sql
*.dump
*.sqlite
*.sqlite3
*.db
*.db-shm
*.db-wal

# --- Heavy Test Fixtures & Snapshots ---
test/fixtures/large/
tests/fixtures/
__snapshots__/
fixtures/**/*.json
mock-data/**/*.json

Click or focus to edit

IGNORE•UTF-8•104 Lines•Spaces: 2

Target File Location

Project Placement

Save as .claudeignore in project root as the readable list. Claude Code does not read this file; the .claude/settings.json below enforces the secrets list.

Generated with this file

.claude/settings.json
Claude Code permissions: blocks reads of secret files and asks before git push. Claude Code does not read .claudeignore.

What's in the ZIP export (20 files)

Unzip into your project root. Every file is already in the folder its tool reads from.

Include extras: Claude Code subagent, Gemini CLI, Aider, Copilot and Kiro scoped rules, CI audit workflow

.claude/settings.json
.claude/skills/fastapi/SKILL.md
.claude/skills/fastapi/scripts/verify.sh
.claudeignore (open in editor)
.cursor/rules/fastapi.mdc
.cursorignore
.github/copilot-instructions.md
.mcp.json
.windsurf/rules/fastapi.md
AGENTS.md
ARCHITECTURE.md
CLAUDE.md
DESIGN.md
MEMORY.md
PRD.md
README.md
TASK.md
llms.txt
prompts/gemini-system-instructions.json
prompts/openai-custom-instructions.md

Backend · Claude Code (via permissions.deny)

Python FastAPI & Pydantic v2 .claudeignore

A .claudeignore for Python FastAPI & Pydantic v2: the paths Claude Code should stay out of, with matching permissions.deny rules.

Path: .claudeignore
Loads: Pattern list
Format: gitignore syntax
Used by: Claude Code (via permissions.deny)

All .claudeignore presets and how .claudeignore works

What this file tells the agent

Claude Code reads files while it works. This .claudeignore keeps the list of Python FastAPI & Pydantic v2 paths it should stay out of (build output, large binaries, logs and secrets). Copy the sensitive ones into permissions.deny in .claude/settings.json, which Claude Code enforces.

Use strict Pydantic v2 BaseModels with Field validation for all input and output schemas.
Use asynchronous route handlers (`async def`) for database operations and external API requests.
Inject dependencies using FastAPI `Depends` pattern; avoid global state.
Type annotate 100% of function signatures with Python 3.12+ type hints.

Code to avoid, and what to write instead

The rule steers the agent away from the left and toward the right.

avoid

@app.post("/users")
def make_user(data: dict):
    # Missing types, sync blocking query
    return db.query(data["email"])

write instead

from fastapi import APIRouter, Depends, HTTPException
from pydantic import BaseModel, Field

router = APIRouter()

class UserPayload(BaseModel):
    email: str = Field(..., min_length=5)

@router.post("/users")
async def create_user(payload: UserPayload, db = Depends(get_db)):
    return await db.users.create(payload.model_dump())

Install it in one command

01
Go to your project root
The file goes at .claudeignore, relative to the root.
02
Download the file
Run the command on the right. It downloads this preset and writes the file.
03
Make sure it gets used
Claude Code does not enforce .claudeignore by itself. Copy the sensitive paths into permissions.deny in .claude/settings.json, which it does enforce.

$ curl -fsSL "https://www.devscratchpad.tech/api/raw/claudeignore/fastapi" -o ".claudeignore"

writes .claudeignore

path

.claudeignore

To write the file from your own code instead, use Read your code or Convert Legacy Rules in the editor above.

More for Python FastAPI & Pydantic v2

Other formats

Other .claudeignore presets

Questions

Does Claude Code honor .claudeignore?: Not by itself. Claude Code enforces permission rules, so copy the sensitive paths into permissions.deny in .claude/settings.json, for example Read(./.env). Keep .claudeignore in the repository root as the reviewable list.
What should I put in .claudeignore?: Exclude large build caches, minified bundles, lockfiles, and environment files containing sensitive credentials.