diff --git a/.gitignore b/.gitignore
index d75f6b7..ec2cd19 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,4 +8,4 @@ __pycache__/
 *.pyc
 .claude/
 .planning/
-tools/
+.tools/
diff --git a/.htaccess b/.htaccess
index 34d5d87..de0041a 100644
--- a/.htaccess
+++ b/.htaccess
@@ -28,7 +28,7 @@ ServerSignature Off
 </FilesMatch>
 
 # Block tools and hidden directories
-RewriteRule ^tools/ - [F,L]
+RewriteRule ^\.tools/ - [F,L]
 RewriteRule ^\.planning/ - [F,L]
 RewriteRule ^\.claude/ - [F,L]
 
diff --git a/infra/nginx.conf b/infra/nginx.conf
index 0f64eaf..cd1d6e5 100644
--- a/infra/nginx.conf
+++ b/infra/nginx.conf
@@ -22,8 +22,8 @@ server {
         return 404;
     }
 
-    # Block tools directory
-    location ^~ /tools/ {
+    # Block tools directory (hidden, but belt-and-suspenders)
+    location ^~ /.tools/ {
         deny all;
         return 404;
     }