Skip to main content
hc
Submit
45 entries

Claude Rules

Browse reusable Claude rules, project guardrails, operating constraints, and prompt policies for teams standardizing AI-assisted development.

Browse & filter all Rules
Quick start
  • Read the rule for scope and caveats.
  • Copy the full rule into CLAUDE.md or your rule system.
  • Run a normal workflow and adjust language that is too broad.

Top Rules

rules

MCP Remote Authorization Boundary Rules

Review remote MCP authorization boundaries before approving OAuth-backed servers.

Review firstSource-backedReview firstAdded 8d ago
Safety ✓ Privacy ✓
rules

AI Assistant Secret Handling Rules

Keep AI coding assistants from leaking secrets by using redaction, approved secret stores, pre-commit checks, rotation triggers, and privacy-safe notes.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

AI-Generated Frontend Accessibility Review Rules

Review AI-generated UI changes for semantic HTML, keyboard access, focus, labels, scan limits, manual checks, and privacy-safe evidence.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

Coding Agent Test-Before-Merge Rules

Require coding agents to run focused tests, report exact commands, protect test data, and block merges when verification is stale or missing.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

Commercial Content Routing Rules

Route commercial and promotional directory submissions with clear disclosure, source evidence, reviewer ownership, and rejection criteria.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

Content-Only Submission PR Gate Rules

Gate content-only PRs before opening: one raw MDX file, reachable sources, issue closure, duplicate checks, validation, and no generated artifacts.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

Contributor Commit And Changelog Rules

Keep contributor PR history release-ready with Conventional Commits, changelog discipline, SemVer impact notes, issue links, and privacy checks.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

Dependency Update Review Rules

Review dependency updates with changelog evidence, lockfile checks, vulnerability triage, compatibility tests, and supply-chain risk notes.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

Documentation Freshness Rules

Keep public registry documentation fresh by tracking source dates, reviewed versions, stable URLs, stale claims, redirects, and update triggers.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

Generated Artifact Churn Rules for Registry Repositories

Prevent generated artifact churn by requiring source-only PRs, reproducible generation, generated-file marking, diff triage, and maintainer-owned rebuilds.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

High-Risk Code Review Escalation Rules

Escalate high-risk code changes with clear triggers, owner signoff, fresh checks, rollback evidence, and privacy-safe review notes.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

MCP Local Tool Access Rules

Keep MCP local tool access bounded with tool inventories, root limits, transport checks, approval gates, credential separation, and privacy-safe logs.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

Privacy Metadata Rules

Review AI workflow directory entries for complete privacy metadata: data touched, execution surface, retention, sharing, provenance, and reviewer notes.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

Production Database Migration Safety Rules

Review production database migrations with lock-risk checks, staged rollout, backfill controls, rollback limits, and privacy-safe evidence.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

Safe Shell Command Rules for Agentic Coding Sessions

Make agentic shell work safer with risk classification, quoting discipline, dry-run review, path checks, secret redaction, and approval gates.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

TypeScript API Client Compatibility Review Rules

Review TypeScript API client changes for exported type surfaces, inferred router contracts, validators, downstream compile evidence, and safe rollout.

Review firstSource-backedReview firstAdded 9d ago
Safety ✓ Privacy ✓
rules

API First Dev Expert - CLAUDE.md Rules for Claude Code

API-first development expert with OpenAPI/Swagger schema design, tRPC type-safe procedures, REST best practices, GraphQL federation, and...

Review firstSource-backedReview firstAdded 8mo ago
Safety · Privacy ·
rules

Monorepo Workspace Manager - CLAUDE.md Rules for Claude Code

Monorepo workspace management expert with Turborepo, pnpm workspaces, Nx integration, package coordination, and cross-package dependency...

Review firstSource-backedReview firstAdded 8mo ago
Safety · Privacy ·
rules

Test-Driven Development Enforcer - CLAUDE.md Rules for Claude Code

Test-driven development expert enforcing red-green-refactor cycles, Vitest/Jest configuration, test coverage requirements, mocking strate...

Review firstSource-backedReview firstAdded 8mo ago
Safety · Privacy ·
rules

Biome Strict Linting Rules - Production Code Quality Config

Biome linting rules configuration for code quality validation.

Review firstSource-backedReview firstAdded 8mo ago
Safety · Privacy ·
rules

AI Prompt Engineering Expert for Claude

Expert in AI prompt engineering for Claude Code and Claude Desktop, focusing on coding tasks, test-driven development patterns, iterative...

Review firstSource-backedReview firstAdded 8mo ago
Safety · Privacy ·
rules

GraphQL Federation Specialist for Claude

Expert in GraphQL Federation architecture for microservices, specializing in Apollo Federation, schema composition, and distributed graph...

Review firstSource-backedReview firstAdded 8mo ago
Safety · Privacy ·
rules

Kubernetes DevSecOps Engineer for Claude

Expert in Kubernetes DevSecOps with GitOps workflows, pod security standards, RBAC, secret management, and automated security scanning fo...

Review firstSource-backedReview firstAdded 8mo ago
Safety · Privacy ·
rules

Next.js 15 Performance Architect for Claude

Expert in Next.js 15 performance optimization with Turbopack, partial prerendering, advanced caching strategies, and Core Web Vitals exce...

Review firstSource-backedReview firstAdded 8mo ago
Safety · Privacy ·
See all 45 Rules →

Frequently asked

What are Claude Rules?
Prompt guardrails, project rules, and operating constraints.
How do I use Rules from HeyClaude?
Copy the full rule asset into CLAUDE.md or your project rule system instead of only taking the summary.
Are HeyClaude Rules reviewed before they are listed?
Each entry is metadata-reviewed for source, trust, and safety/privacy signals before it appears. HeyClaude does not scan for malware, so always review the linked source before installing anything that touches your filesystem, network, or credentials.
New Rules, weekly

A short, calm digest of reviewed Claude resources. Unsubscribe any time.