Hooks Settings

{
  "disableAllHooks": false,
  "allowedHttpHookUrls": [
    "https://hooks.internal.company.com/*"
  ],
  "httpHookAllowedEnvVars": ["HOOK_SECRET", "AUDIT_TOKEN"],
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "echo \"$(date): Bash tool used\" >> ~/.claude/audit.log"
          }
        ]
      }
    ]
  }
}

disableAllHooks — disable ALL hooks and the custom status line (overrides everything below).
allowedHttpHookUrls — URL patterns HTTP hooks are allowed to target (* is a wildcard). Undefined = no restriction. Empty array = block all HTTP hooks.
httpHookAllowedEnvVars — env vars that HTTP hooks are allowed to interpolate into headers.
hooks — hook definitions; example runs a shell command after every Bash tool use.