diff --git a/config/settings.json b/config/settings.json
new file mode 100644
index 0000000..293c01e
--- /dev/null
+++ b/config/settings.json
@@ -0,0 +1,20 @@
+{
+  "theme": "light",
+  "env": {
+    "INSIDE_CLAUDE_CODE": "1",
+    "BASH_DEFAULT_TIMEOUT_MS": "120000",
+    "BASH_MAX_TIMEOUT_MS": "300000"
+  },
+  "permissions": {
+    "allow": [],
+    "deny": [
+      "Read(**/.env)",
+      "Read(**/.env.*)",
+      "Read(**/secrets*)",
+      "Read(**/*.pem)",
+      "Read(**/*.key)",
+      "Read(**/id_rsa)",
+      "Read(**/id_ed25519)"
+    ]
+  }
+}
\ No newline at end of file