Agent
Security
Ignore Rules

Ignore Rules

Use .proxyai/settings.json ignore rules when the restriction is about where the agent can access.

Example

{
  "ignore": [
    ".env",
    ".env.*",
    ".git/",
    "node_modules/",
    "build/",
    "dist/",
    "*.pem",
    "secrets/**"
  ]
}

Pattern behavior

Ignore entries are path-based globs:

  • * matches within one path segment
  • ** matches across directories
  • ? matches one character
  • dir/ matches a directory prefix
  • Exact names also work (for example .env)

Paths are normalized before matching, and both relative and absolute forms are considered.

What this protects

  • Read: blocked for ignored paths
  • Write: blocked for ignored paths
  • Bash: commands targeting ignored files are denied by policy checks

For command allowlists, see Permissions.

PermissionsSubagents