Claude Code Restricted Mode

A launch flag that strips Claude Code down to reading and writing files in one folder, with no ability to run commands.

Starting with --restricted, or setting CLAUDE_CODE_RESTRICTED=1, removes the built-in tools that run commands or code, and removes WebFetch unless you name it in --tools
File tools stay available but cannot reach outside the working directory
The mode refuses bypassPermissions and ignores user, project, and local settings files, so nothing already on the machine can widen what the session is allowed to do
Shipped in Claude Code v2.1.248