Observatory › Claude Code
Claude Code on Windows: what it can do on your computer
Mode it starts in
Starting mode: auto
Who decides what would otherwise be asked: another AI model.
Starting mode since Claude Code 2.1.283.
Built-in starting permission mode for interactive sessions; in auto mode a model, not the user, decides what would otherwise be asked.
Official source · accessed on 24 October 2026
What it can do by default
According to the vendor's documentation, before you change any setting.
| Action | Where | By default | Note | Source |
|---|---|---|---|---|
| Read files | Working directories | Without asking | Official source | |
| Read files | Outside the working directories | Asks first | Official source | |
| Run commands | Read-only commands | Without asking | Built-in read-only shell commands run on any path unless permissions.blockReadsOutsideWorkingDirectories is set. | Official source |
| Run commands | All commands | Asks first | Official source | |
| Edit files | Any path | Asks first | Official source | |
| Edit files | Protected paths | Asks first | Writes to protected paths are asked even in modes that otherwise allow edits. | Official source |
| Connect to the internet | Pre-approved domains | Without asking | Web fetches to a built-in list of documentation domains. | Official source |
| Connect to the internet | Any destination | Asks first | Official source |
«Asks first»: the action needs approval. Who gives it depends on the mode it starts in.
Where it keeps configuration and keys
Paths on Windows. <project> is the folder of each project.
| What | Path on Windows | Keys | Note | Source |
|---|---|---|---|---|
| User settings | %USERPROFILE%\.claude\settings.json | Can hold keys in plain text | The env block can hold keys. | Official source |
| Project settings | <project>\.claude\settings.json | Can hold keys in plain text | Official source | |
| Local project settings | <project>\.claude\settings.local.json | Can hold keys in plain text | Official source | |
| Managed settings | C:\Program Files\ClaudeCode\managed-settings.json | Not known | Source: RosmarOps reading | |
| MCP servers (user) | %USERPROFILE%\.claude.json | Can hold keys in plain text | MCP env and headers blocks can hold keys. | Official source |
| MCP servers (project) | <project>\.mcp.json | Can hold keys in plain text | Source: RosmarOps reading | |
| MCP servers (managed) | C:\Program Files\ClaudeCode\managed-mcp.json | Not known | Source: RosmarOps reading | |
| Instructions | <project>\CLAUDE.md, %USERPROFILE%\.claude\CLAUDE.md | No keys | Source: RosmarOps reading |
What RosmarOps does with this agent
Evaluated since RosmarOps 0.1.0: RosmarOps reads its configuration on your computer, without network access, and gives it an Agent Posture Score.
Security change history
Only changes that affect what it can do on your computer. Nothing is deleted: corrections stay on record.
No security changes recorded yet.
Sources and data
- https://code.claude.com/docs/en/permission-modes · accessed on 24 October 2026
- https://code.claude.com/docs/en/permission-modes#protected-paths · accessed on 24 October 2026
- https://code.claude.com/docs/en/permissions · accessed on 23 October 2026
- https://code.claude.com/docs/en/settings · accessed on 28 October 2026
- https://github.com/qtorb/rosmarops/blob/v0.3.0/adapters/windows/claude_settings.go · accessed on 28 October 2026
- https://github.com/qtorb/rosmarops/blob/v0.3.0/adapters/windows/instructions.go · accessed on 28 October 2026
- https://github.com/qtorb/rosmarops/blob/v0.3.0/adapters/windows/mcp.go · accessed on 28 October 2026
- https://github.com/qtorb/rosmarops/blob/v0.3.0/adapters/windows/platform.go · accessed on 28 October 2026
- This page as JSON
Vendor's reply
None received. If the vendor sends one, it is published here, signed and dated, without changing anything above.
See a factual error? Tell us, with the source: legal@rosmarops.com
Observation of configuration in a controlled environment; not a security guarantee or advice.