secure-deployment changedmanaged-agents/secure-deployment
Recorded here
Lines+2added
Lines−0removed
From line
348
where the diff opens
First seen
13 Oct 2026
this site's first read of the page
Recorded edits15to this page, all time
The whole hunk
from line 348, old and new numbered
/
from line 348
348348
349349Review each paused call before you allow it. A client that allows every call without showing it to a person is the same as `always_allow`. See [Respond to confirmation requests](https://platform.claude.com/docs/en/managed-agents/permission-policies#respond-to-confirmation-requests) and [See how each call was evaluated](https://platform.claude.com/docs/en/managed-agents/permission-policies#see-how-each-call-was-evaluated).
350350
351Have a person approve each call to a tool that can move money, such as a tool for payments, withdrawals, transfers, or payouts. If the tool takes a permission policy, set it to `always_ask`, not `always_allow` or `auto`. If it’s a custom tool, don’t run a call until a person has approved it. For text to add to the agent’s system prompt, see [Payments, account numbers, and financial records](https://platform.claude.com/docs/en/build-with-claude/prompt-engineering/claude-prompting-best-practices#payments-account-numbers-and-financial-records).
352
351353## Give the agent the smallest tool set
352354
353355Set `default_config.enabled` (java, php: `defaultConfig.enabled`; csharp, go: `DefaultConfig.Enabled`) to `false` and [enable only the tools the agent needs](https://platform.claude.com/docs/en/managed-agents/tools#enabling-only-specific-tools). The agent toolset enables all eight built-in tools by default.
No line in this hunk matches that.