Configure permissions changedpermissions
Nearest release: v2.1.322, published an hour before upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 10 Nov 2026 03:14 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 10 Nov 2026 03:37 UTC.
Upstream edited
Recorded here
Lines+2added
Lines−0removed
From line
574
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits82to this page, all time
The whole hunk
from line 574, old and new numbered
/
from line 574
574574* `mcp__puppeteer__*` uses wildcard syntax and also matches all tools from the `puppeteer` server
575575* `mcp__puppeteer__puppeteer_navigate` matches the `puppeteer_navigate` tool provided by the `puppeteer` server
576576
577Write allow rules for MCP tools without a [specifier](#use-specifiers-for-fine-grained-control), which a [permission update](https://code.claude.com/docs/en/hooks.md#permission-update-entries) calls `ruleContent`. If you add one to allow only some of a tool's calls, the rule doesn't match any call. To block some calls instead, see [Match by input parameter](#match-by-input-parameter).
578
577579For `<server>`, write the server's name the way it appears in that server's tool names. These examples show the rule to write for a name with special characters, a server from a plugin, and a name that contains `__` or ends in `_`:
578580
579581* **Names with characters such as `.` or spaces**: those characters become `_`, so for a server you configured as `my.server`, write `mcp__my_server__*`
No line in this hunk matches that.