diff --git a/scripts/rules.matterlint b/scripts/rules.matterlint
index 5546fb317ee213..d0dfeec6450fd5 100644
--- a/scripts/rules.matterlint
+++ b/scripts/rules.matterlint
@@ -105,6 +105,13 @@ all endpoints {
     require global attribute featureMap = 65532;
     require global attribute clusterRevision = 65533;
 
+    // Deny rules:
+    //   deny cluster Foo;  // denies entire cluster by name
+    //   deny cluster 123;  // denies entire cluster by id
+    //   deny cluster Foo attribute bar;  // denies specific attribute by name
+    //   deny cluster Foo attribute 123;  // denies specific attribute by id
+    //   deny cluster 234 attribute 567;  // Allows deny using ids only
+
     // (previously AverageWearCount, see #30002/#29285 in GitHub)
     deny cluster GeneralDiagnostics attribute 9;
 }