Claude Code設定ガイド — settings.jsonの主要フィールド・環境変数・実戦レシピ

Managed 設定(remote / plist / レジストリ / ファイル)
      ▼ 覆せない
コマンドライン引数(--model, --permission-mode 等)
      ▼
ローカルプロジェクト設定 (.claude/settings.local.json)
      ▼
共有プロジェクト設定 (.claude/settings.json)
      ▼
ユーザー設定 (~/.claude/settings.json)
      ▼
組み込みデフォルト

{
  "$schema": "https://json.schemastore.org/claude-code-settings.json",
  "model": "claude-sonnet-4-6",
  "permissions": {
    "allow": ["Bash(npm run lint)", "Read(~/.zshrc)"],
    "deny": ["Bash(curl *)", "Read(./.env*)", "Read(./secrets/**)"]
  },
  "env": {
    "CLAUDE_CODE_ENABLE_TELEMETRY": "1"
  }
}

{
  "apiKeyHelper": "~/.config/claude/get-api-key.sh",
  "env": {
    "CLAUDE_CODE_API_KEY_HELPER_TTL_MS": "1800000"
  }
}

#!/bin/bash
# 1Password CLI から取得する例
op read "op://Private/Anthropic API/credential"

{
  "attribution": {
    "commit": "",
    "pr": ""
  }
}

{
  "availableModels": ["sonnet", "haiku"]
}

{
  "claudeMdExcludes": [
    "**/monorepo/CLAUDE.md",
    "/Users/me/monorepo/other-team/.claude/rules/**"
  ]
}

{
  "permissions": {
    "allow": ["Bash(npm run *)", "Bash(git diff *)", "Read(~/.config/**)"],
    "ask": ["Bash(git push *)"],
    "deny": ["Bash(curl *)", "Read(./.env*)", "Read(./secrets/**)"],
    "additionalDirectories": ["../shared-lib/"],
    "defaultMode": "acceptEdits",
    "disableBypassPermissionsMode": "disable"
  }
}

{
  "sandbox": {
    "enabled": true,
    "autoAllowBashIfSandboxed": true,
    "excludedCommands": ["docker *"],
    "filesystem": {
      "allowWrite": ["/tmp/build", "~/.kube"],
      "denyRead": ["~/.aws/credentials"]
    },
    "network": {
      "allowedDomains": ["github.com", "*.npmjs.org", "registry.yarnpkg.com"],
      "deniedDomains": ["uploads.github.com"],
      "allowLocalBinding": true
    }
  }
}

{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Write|Edit",
        "hooks": [
          {
            "type": "command",
            "command": "\"$CLAUDE_PROJECT_DIR\"/.claude/hooks/lint.sh",
            "timeout": 30,
            "statusMessage": "Linting..."
          }
        ]
      }
    ]
  }
}

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "mcp__.*",
        "hooks": [
          {
            "type": "http",
            "url": "http://localhost:8080/validate",
            "headers": { "Authorization": "Bearer $AUTH_TOKEN" },
            "allowedEnvVars": ["AUTH_TOKEN"],
            "timeout": 30
          }
        ]
      }
    ]
  }
}

{
  "mcpServers": {
    "github": {
      "type": "http",
      "url": "https://api.githubcopilot.com/mcp/"
    },
    "airtable": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "airtable-mcp-server"],
      "env": { "AIRTABLE_API_KEY": "${AIRTABLE_API_KEY}" }
    },
    "legacy": {
      "type": "sse",
      "url": "https://mcp.example.com/sse"
    }
  }
}

{
  "mcpServers": {
    "internal-api": {
      "type": "http",
      "url": "https://mcp.internal.example.com",
      "headersHelper": "/opt/bin/get-mcp-auth-headers.sh"
    }
  }
}

---
name: Reviewer
description: コードレビュー専用、実装はせず指摘のみ
keep-coding-instructions: false
---
 
あなたはシニアエンジニアとしてコードレビューを行います。
実装ではなく、問題点・改善提案・質問のみを出力してください。

{
  "statusLine": {
    "type": "command",
    "command": "~/.claude/statusline.sh",
    "padding": 2,
    "refreshInterval": 5
  }
}

---
paths:
  - "src/api/**/*.ts"
  - "lib/**/*.ts"
---
 
# API開発ルール
 
- 全てのエンドポイントは入力検証を含める
- 標準エラー応答形式を使用する

{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Write|Edit",
        "hooks": [
          {
            "type": "command",
            "command": "pnpm exec prettier --write --ignore-unknown \"$CLAUDE_PROJECT_DIR\"",
            "timeout": 30
          }
        ]
      }
    ]
  }
}

{
  "permissions": {
    "defaultMode": "acceptEdits",
    "additionalDirectories": ["~/work/shared-lib"],
    "allow": [
      "Bash(pnpm *)",
      "Bash(npm run *)",
      "Bash(git diff *)",
      "Bash(git log *)",
      "Bash(git status*)",
      "Bash(gh pr list*)"
    ],
    "ask": ["Bash(git push*)", "Bash(gh pr create*)"],
    "deny": ["Bash(rm -rf *)", "Bash(curl *)", "Bash(sudo *)"]
  }
}

{
  "env": {
    "CLAUDE_CODE_USE_BEDROCK": "1",
    "AWS_REGION": "us-east-1",
    "ANTHROPIC_MODEL": "us.anthropic.claude-sonnet-4-6-20250929-v1:0",
    "ANTHROPIC_SMALL_FAST_MODEL": "us.anthropic.claude-haiku-4-5-20251001-v1:0"
  },
  "awsAuthRefresh": "aws sso login --profile my-profile"
}

{
  "$schema": "https://json.schemastore.org/claude-code-settings.json",
  "model": "claude-sonnet-4-6",
  "availableModels": ["sonnet", "opus"],
  "includeGitInstructions": false,
  "permissions": {
    "defaultMode": "default",
    "allow": [
      "Bash(pnpm run *)",
      "Bash(pnpm exec *)",
      "Bash(pnpm test*)",
      "Read(./package.json)",
      "Read(./tsconfig.json)"
    ],
    "ask": ["Bash(git push*)"],
    "deny": ["Read(./.env*)", "Read(./secrets/**)", "Bash(curl *)"]
  },
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Write|Edit",
        "hooks": [
          { "type": "command", "command": "pnpm exec biome check --write --unsafe \"$CLAUDE_PROJECT_DIR\"", "timeout": 30 }
        ]
      }
    ]
  },
  "statusLine": {
    "type": "command",
    "command": "~/.claude/statusline.sh"
  }
}

{
  "permissions": {
    "disableBypassPermissionsMode": "disable",
    "disableAutoMode": "disable"
  },
  "allowManagedPermissionRulesOnly": true,
  "disableSkillShellExecution": true,
  "sandbox": {
    "enabled": true,
    "failIfUnavailable": true,
    "filesystem": {
      "allowManagedReadPathsOnly": true
    },
    "network": {
      "allowManagedDomainsOnly": true,
      "allowedDomains": ["github.com", "*.npmjs.org", "api.anthropic.com"]
    }
  },
  "forceLoginMethod": "claudeai",
  "forceLoginOrgUUID": "00000000-0000-0000-0000-000000000000",
  "minimumVersion": "2.1.100"
}

{
  "mcpServers": {
    "airtable": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "airtable-mcp-server"],
      "env": {
        "AIRTABLE_API_KEY": "${AIRTABLE_API_KEY}",
        "AIRTABLE_BASE_ID": "${AIRTABLE_BASE_ID:-default_base}"
      }
    },
    "internal-sso": {
      "type": "http",
      "url": "https://mcp.internal.example.com",
      "headersHelper": "/opt/bin/get-internal-token.sh"
    }
  }
}

export AIRTABLE_API_KEY="$(op read 'op://Work/Airtable/credential')"
export AIRTABLE_BASE_ID="appXXXXX"

{
  "hooks": {
    "Notification": [
      {
        "hooks": [
          {
            "type": "command",
            "command": "~/.claude/hooks/cost-alert.sh"
          }
        ]
      }
    ]
  }
}

#!/usr/bin/env bash
set -euo pipefail
input=$(cat)
# 通知が権限プロンプトのときだけSlackへ
type=$(echo "$input" | jq -r '.notification_type // ""')
if [ "$type" = "permission_prompt" ]; then
  curl -s -X POST "$SLACK_WEBHOOK_URL" \
    -H 'Content-Type: application/json' \
    -d "$(jq -n --arg text "Claude Code: 権限プロンプト待ち (session=$(echo "$input" | jq -r .session_id))" '{text: $text}')"
fi
exit 0

#!/bin/bash
input=$(cat)
MODEL=$(echo "$input" | jq -r '.model.display_name')
DIR=$(echo "$input" | jq -r '.workspace.current_dir')
COST=$(echo "$input" | jq -r '.cost.total_cost_usd // 0')
PCT=$(echo "$input" | jq -r '.context_window.used_percentage // 0' | cut -d. -f1)
 
BRANCH=""
if git -C "$DIR" rev-parse --git-dir > /dev/null 2>&1; then
  BRANCH=" | 🌿 $(git -C "$DIR" branch --show-current 2>/dev/null)"
fi
 
printf '[%s] 📁 %s%s | 💰 $%.2f | %d%%\n' \
  "$MODEL" "${DIR##*/}" "$BRANCH" "$COST" "$PCT"

{
  "statusLine": {
    "type": "command",
    "command": "~/.claude/statusline.sh",
    "refreshInterval": 5
  }
}

---
name: PR Reviewer
description: コードレビュー専用(実装禁止)
keep-coding-instructions: false
---
 
あなたはシニアエンジニアです。実装変更は一切行わず、以下を出力してください:
 
1. 変更点のサマリー
2. リスクの高い箇所(セキュリティ/パフォーマンス/破壊的変更)
3. 改善提案(優先度付き)
4. 質問/確認事項
 
敬体(ですます調)で書いてください。

{
  "outputStyle": "PR Reviewer"
}

# プロジェクト共通ルール
 
@AGENTS.md
@.claude/rules/coding-style.md
@.claude/rules/git-workflow.md
 
# 補足(Claude Code専用)
 
- 変更前に `pnpm run typecheck` を通すこと
- `src/api/` 配下は `.claude/rules/api.md` を参照

---
paths:
  - "src/api/**/*.ts"
---
 
# API開発ルール
 
- 入力検証は zod で実装
- エラーレスポンスは `{ error: { code, message } }` 形式

{
  "$schema": "https://json.schemastore.org/claude-code-settings.json",
  "model": "claude-sonnet-4-6",
  "outputStyle": "Default",
  "language": "japanese",
  "includeGitInstructions": true,
  "attribution": {
    "commit": "",
    "pr": ""
  },
  "permissions": {
    "defaultMode": "acceptEdits",
    "additionalDirectories": ["~/work/shared"],
    "allow": [
      "Bash(pnpm *)",
      "Bash(npm *)",
      "Bash(bun *)",
      "Bash(git diff *)",
      "Bash(git log *)",
      "Bash(git status*)",
      "Bash(git branch*)",
      "Bash(gh repo view*)",
      "Bash(gh pr list*)",
      "Bash(gh issue list*)",
      "Read(~/.config/**)"
    ],
    "ask": [
      "Bash(git push*)",
      "Bash(gh pr create*)",
      "Bash(gh pr merge*)"
    ],
    "deny": [
      "Bash(rm -rf *)",
      "Bash(curl *)",
      "Bash(wget *)",
      "Bash(sudo *)",
      "Bash(git push --force*)",
      "Bash(git push -f*)",
      "Read(./.env*)",
      "Read(./secrets/**)"
    ]
  },
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Write|Edit",
        "hooks": [
          {
            "type": "command",
            "command": "pnpm exec prettier --write --ignore-unknown \"$CLAUDE_PROJECT_DIR\" 2>/dev/null || true",
            "timeout": 30
          }
        ]
      }
    ]
  },
  "statusLine": {
    "type": "command",
    "command": "~/.claude/statusline.sh",
    "refreshInterval": 5
  },
  "env": {
    "CLAUDE_CODE_ENABLE_TELEMETRY": "0",
    "BASH_DEFAULT_TIMEOUT_MS": "180000",
    "MAX_MCP_OUTPUT_TOKENS": "50000"
  }
}

{
  "$schema": "https://json.schemastore.org/claude-code-settings.json",
  "model": "claude-sonnet-4-6",
  "availableModels": ["sonnet", "opus"],
  "includeGitInstructions": false,
  "permissions": {
    "defaultMode": "default",
    "allow": [
      "Bash(pnpm install)",
      "Bash(pnpm run *)",
      "Bash(pnpm exec *)",
      "Bash(pnpm test*)",
      "Bash(pnpm typecheck*)",
      "Bash(git diff *)",
      "Bash(git log *)",
      "Bash(git status*)",
      "Bash(git branch*)"
    ],
    "ask": [
      "Bash(git push*)",
      "Bash(gh pr create*)",
      "Bash(gh pr merge*)",
      "Bash(pnpm publish*)"
    ],
    "deny": [
      "Bash(rm -rf *)",
      "Bash(curl *)",
      "Bash(sudo *)",
      "Bash(git push --force*)",
      "Read(./.env*)",
      "Read(./secrets/**)",
      "Read(./config/credentials.json)",
      "Edit(./.github/workflows/**)"
    ]
  },
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "if": "Bash(pnpm publish*)",
            "command": "\"$CLAUDE_PROJECT_DIR\"/.claude/hooks/pre-publish-check.sh",
            "timeout": 60
          }
        ]
      }
    ],
    "PostToolUse": [
      {
        "matcher": "Write|Edit",
        "hooks": [
          {
            "type": "command",
            "command": "pnpm exec biome check --write --unsafe \"$CLAUDE_PROJECT_DIR\" 2>/dev/null || true",
            "timeout": 30
          }
        ]
      }
    ],
    "SessionStart": [
      {
        "hooks": [
          {
            "type": "command",
            "command": "\"$CLAUDE_PROJECT_DIR\"/.claude/hooks/setup-env.sh"
          }
        ]
      }
    ]
  },
  "statusLine": {
    "type": "command",
    "command": "\"$CLAUDE_PROJECT_DIR\"/.claude/scripts/statusline.sh",
    "padding": 1,
    "refreshInterval": 10
  },
  "enableAllProjectMcpServers": false,
  "enabledMcpjsonServers": ["github", "internal-docs"],
  "attribution": {
    "commit": "",
    "pr": ""
  },
  "claudeMdExcludes": [
    "**/node_modules/**/CLAUDE.md"
  ]
}

{
  "$schema": "https://json.schemastore.org/claude-code-settings.json",
  "minimumVersion": "2.1.100",
  "forceLoginMethod": "claudeai",
  "forceLoginOrgUUID": "00000000-0000-0000-0000-000000000000",
  "forceRemoteSettingsRefresh": true,
  "availableModels": ["sonnet", "opus"],
  "model": "claude-sonnet-4-6",
  "permissions": {
    "defaultMode": "default",
    "disableBypassPermissionsMode": "disable",
    "disableAutoMode": "disable",
    "skipDangerousModePermissionPrompt": false
  },
  "allowManagedPermissionRulesOnly": true,
  "allowManagedHooksOnly": true,
  "allowManagedMcpServersOnly": true,
  "allowedMcpServers": [
    { "serverName": "github" },
    { "serverUrl": "https://mcp.internal.example.com/*" }
  ],
  "deniedMcpServers": [
    { "serverName": "filesystem" }
  ],
  "allowedHttpHookUrls": [
    "https://audit.internal.example.com/*",
    "https://hooks.internal.example.com/*"
  ],
  "httpHookAllowedEnvVars": ["AUDIT_TOKEN"],
  "sandbox": {
    "enabled": true,
    "failIfUnavailable": true,
    "autoAllowBashIfSandboxed": false,
    "allowUnsandboxedCommands": false,
    "excludedCommands": ["docker *"],
    "filesystem": {
      "allowManagedReadPathsOnly": true,
      "allowRead": ["."],
      "denyRead": [
        "~/.aws/credentials",
        "~/.ssh/**",
        "~/.config/gh/**"
      ],
      "allowWrite": ["/tmp/build"]
    },
    "network": {
      "allowManagedDomainsOnly": true,
      "allowedDomains": [
        "api.anthropic.com",
        "github.com",
        "*.githubusercontent.com",
        "registry.npmjs.org",
        "*.internal.example.com"
      ],
      "deniedDomains": [
        "pastebin.com",
        "transfer.sh"
      ],
      "allowLocalBinding": false
    }
  },
  "strictKnownMarketplaces": [
    { "source": "github", "repo": "example-corp/approved-plugins" }
  ],
  "blockedMarketplaces": [
    { "source": "github", "repo": "untrusted/plugins" }
  ],
  "channelsEnabled": false,
  "allowedChannelPlugins": [],
  "disableSkillShellExecution": true,
  "env": {
    "CLAUDE_CODE_USE_BEDROCK": "1",
    "AWS_REGION": "us-east-1",
    "CLAUDE_CODE_ENABLE_TELEMETRY": "1",
    "OTEL_METRICS_EXPORTER": "otlp",
    "OTEL_LOGS_EXPORTER": "otlp",
    "OTEL_EXPORTER_OTLP_ENDPOINT": "https://otlp.internal.example.com",
    "CLAUDE_CODE_DISABLE_GIT_INSTRUCTIONS": "0",
    "CLAUDE_CODE_SUBPROCESS_ENV_SCRUB": "1",
    "DISABLE_INSTALL_GITHUB_APP_COMMAND": "1"
  },
  "companyAnnouncements": [
    "本環境のClaude Codeは監査ログが有効です。秘密情報の投入は禁止されています。"
  ]
}