diff --git a/dot_claude/settings.json b/dot_claude/settings.json
index a89449e..4fe95e2 100644
--- a/dot_claude/settings.json
+++ b/dot_claude/settings.json
@@ -67,7 +67,10 @@
       "Read(**/.envrc)",
       "Read(**/.envrc.local)",
       "Read(**/secrets/**)",
-      "Read(**/credentials)",
+      "Read(**/credentials.json)",
+      "Read(**/credentials.yml)",
+      "Read(**/credentials.yaml)",
+      "Read(**/credentials.db)",
       "Read(~/.aws/credentials)",
       "Read(~/.aws/config)",
       "Read(~/.ssh/**)",
@@ -122,11 +125,15 @@
         "**/.envrc",
         "**/.envrc.local",
         "**/secrets/**",
-        "**/credentials",
+        "**/credentials.json",
+        "**/credentials.yml",
+        "**/credentials.yaml",
+        "**/credentials.db",
         "**/*.pem",
         "**/*.key"
       ],
       "allowWrite": [
+        "/var/folders/*/*/T",
         "~/.npm",
         "~/.pnpm-store",
         "~/go/pkg",