What it does, and what it leaves to you
Claude Code is Anthropic’s coding agent. It reads your project, edits files and runs commands, and you can use it in a terminal, in VS Code or JetBrains, in the Claude desktop app or in the browser at claude.ai/code. It doesn’t host your app. Where it runs, which domain it uses and every launch basic are your choices, though Claude Code can do most of the work once you ask.
Write your launch rules down once
Claude Code reads a file called CLAUDE.md in your project at the start of every session. Rules you put there apply to every change, so you don’t have to repeat them in each prompt, and a new session can’t forget them.
Rules to add to your CLAUDE.md
- Never put secret keys in code sent to the browser or in files committed to git. Use environment variables. - Every public page is served as finished HTML, with its own title, meta description and canonical URL. - Public pages stay open to search engines. Dashboard, account and admin pages stay private. - Ask me before deleting data or changing database access rules.
Make sure search engines can read your pages
Ask for “a web app” and you may get a single-page app that fills itself in with JavaScript, which can leave search engines and link previews with an empty shell. For the pages you want found, such as your homepage, pricing and guides, use a framework that serves finished HTML: server-side rendering or static generation, with Next.js, Astro, Nuxt, SvelteKit or similar. The logged-in part of the app can stay as it is.
Prompt to paste into Claude Code
Check how my public pages are rendered. If the homepage, pricing and other marketing pages need client-side JavaScript to show their content, switch them to server-side rendering or static generation without changing the logged-in app. Add a unique title, meta description, canonical URL and Open Graph tags to every public page, plus a sitemap.xml and robots.txt for my production domain. Show me the plan before you change anything.
Hosting and your domain
Pick a host that supports your framework and handles HTTPS. Once you’ve created an account and logged in to the host’s command-line tool, Claude Code can run the deploy commands for you. If you use Claude Code in the browser, it works on a GitHub repository and hands you changes as branches and pull requests, so connect that repository to a host that deploys automatically when you merge.
Then connect your own domain, redirect every other address to it and check the result in Google Search Console with URL Inspection → View crawled page.
Secrets
- Keep keys in environment variables on your host, never in the code you commit.
- Add
.envfiles to.gitignorebefore your first commit. If a key ever reached your repository, replace it. - Only use secret keys in server code. Anything sent to the browser can be read by anyone.
Our security guide covers database rules, spending limits and admin pages.
Email, tracking and the rest
Nothing is built in here either. Pick an email provider and set up SPF, DKIM and DMARC (here’s how), add analytics, and write a privacy policy and terms before you collect any personal data.
Your Claude Code launch checklist
- Launch rules written into
CLAUDE.md - Public pages served as finished HTML
- Deployed with HTTPS on your own domain
- Titles, descriptions, canonicals and social tags on every public page
- Sitemap and robots.txt, submitted in Google Search Console and Bing Webmaster Tools
- No secrets in the repository or the browser
- An email provider with SPF, DKIM and DMARC
- Analytics, a privacy policy and terms
- Two or three communities picked where your users already talk
Sources
- Claude Code docs, overview
- Claude Code docs, CLAUDE.md and memory
- Claude Code docs, Claude Code on the web
- Google Search Central, JavaScript SEO basics
Builders change fast. If something here no longer matches what you see, the builder’s own docs win.