208 pages for deny.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
Week 25 · June 15–19, 2026
Claude Code CLI · in the page
whats-new/2026-w25
…eable page from your session with Artifacts, match tool parameters in deny and ask rules, and set any setting from the prompt with /config. Releases [v2.1.178 → v2.1.183](/docs/en/changelog.md#2-1-17…
Week 26 · June 22–26, 2026
Claude Code CLI · in the page
whats-new/2026-w26
…ts now surface permission prompts in the main session instead of auto-denying; the dialog shows which agent is asking, and Esc denies only that tool`/install-github-app` can now install only the GitHu…
What's new
Claude Code CLI · in the page
whats-new/index
…** now surface permission prompts in the main session instead of auto-denying. [Read the Week 26 digest →](/docs/en/whats-new/2026-w26.md) **Week 25** June 15–19, 2026 **Artifacts**: turn a sessio…
Orchestrate subagents at scale with dynamic workflows
Claude Code CLI · in the page
workflows
…ions.md#how-permissions-are-evaluated) as the rest of the session, so deny rules, ask rules, and `dontAsk` mode apply to the launch as they apply to every tool call. To let the workflow start in these…
Auto mode
Claude Documentation · in the page
claude-science/auto-mode
…ing the check holds or can't check still shows you the card. Allow or deny the request as you would with auto mode off. > [!WARNING] > > Auto mode in Claude Science reduces permission cards but does…
Configuration file reference
Claude Documentation · in the page
claude-science/configuration-file-reference
…ed_domains` | array of strings | `[]` | Domains added to the built-in denylist. A denied domain is blocked even if it also appears on the allowlist, and the built-in denylist entries cannot be removed…
Core concepts
Claude Documentation · in the page
claude-science/core-concepts
…cess. The card names exactly what's being requested. You can allow or deny each one. | Action | Card title | Scope options | | - | - | - | | Read or write a folder | Access `<folder>` on your compute…
Use Claude Science on a corporate network
Claude Documentation · in the page
claude-science/corporate-networks
…ponse 403`, because path-style object-storage hosts are on a built-in denylist that cannot be overridden; have the mirror serve the files itself, or redirect to bucket-qualified hostnames such as `<bu…
Glossary
Claude Documentation · in the page
claude-science/glossary
…l, a saved credential, or re-configuring Claude Science; you allow or deny it. **Provenance (the artifact record)**: the panel behind every artifact version showing the code, cells, conversation, env…
Troubleshoot Claude Tag setup
Claude Documentation · in the page
claude-tag/admins/troubleshooting
…P. **What it means** A channel session's outbound network access is deny-by-default. A host is reachable when a connector or an [allowed domain](/docs/claude-tag/admins/add-connections.md#allow-a-ho…
Security and data handling
Claude Documentation · in the page
claude-tag/concepts/security-and-data
…ronment, outbound traffic from a channel session's sandbox is default-deny. Requests go only to hosts an allow layer covers, and the layers are a [credential's allowed websites](/docs/claude-tag/admin…
Changelog
Claude Documentation · in the page
cowork/changelog
…policy requires sandboxing". The refusal stays for organizations that deny or ask on Bash commands by pattern, or whose `disabledBuiltinTools` holds `Bash` (with or without a pattern), `PowerShell` wi…
Set up Cowork (local mode) for a HIPAA-ready organization
Claude Documentation · in the page
cowork/hipaa-setup
…e Desktop policy](#deploy-the-claude-desktop-policy) | | `permissions.deny` | A rule that denies `Bash` with no pattern also stops Claude from running shell commands in Cowork | | `allowManagedPermiss…
Available settings
Claude Documentation · in the page
government/config/settings
…Command names, such as `curl` or `ssh`, that Claude Code applies as [deny rules](https://code.claude.com/docs/en/permissions#bash) for its Bash and PowerShell tools. | None blocked | Claude Code | |…
Connect Claude Desktop to Claude for Government
Claude Documentation · in the page
government/deploy-desktop/configure
…VIRTUAL MACHINE\Virtual Machines` group, or lists that group under **Deny log on as a service** | Follow [Windows security policy blocks the Cowork workspace](/docs/third-party/claude-desktop/install…
Windows fleet checklist
Claude Documentation · in the page
government/deploy-desktop/windows-checklist
…Policy or MDM. In that case, include this group, and keep it out of **Deny log on as a service**. To check a device and change the policy, follow [Windows security policy blocks the Cowork workspace](…
Plugins in Claude Desktop
Claude Documentation · in the page
government/desktop/plugins
…the search it wants to run. Allow it once, allow it for this task, or deny it. > > A plugin packages skills and commands from your organization. Plugins lists the ones already installed. Some install…
Video walkthroughs for Claude Desktop
Claude Documentation · in the page
government/desktop/video-walkthroughs
…rch. It shows you the search it wants to run. Allow once runs it, and Deny skips it. > > Then Claude searches and answers. > > Chat also reads files you attach. Add a document with the plus button and…
Manage plugins for your organization
Claude Documentation · in the page
plugins/admin
…asked to publish to your organization. This is where you [approve or deny them](#review-plugins-that-members-publish). ### Policy The [**Policy**](https://claude.ai/admin-settings/skills?tab=policy…
Chat in Claude Desktop on 3P
Claude Documentation · in the page
third-party/claude-desktop/chat
…s`, in `builtinToolPolicy` with a value other than `"allow"`, or as a deny or ask rule in Claude Code's own managed settings on the device. See [`chatAdvancedFileAnalysisEnabled`](/docs/third-party/cl…
Code in Claude Desktop on 3P
Claude Documentation · in the page
third-party/claude-desktop/code
…r-tool `toolPolicy` values on each server are emitted as `permissions.deny` (for `blocked`) or `permissions.ask` (for `ask`) rules against the corresponding `mcp__<server>__<tool>` names. | | `allowed…
Configuration reference
Claude Documentation · in the page
third-party/claude-desktop/configuration
…ols`, in `builtinToolPolicy` with a value other than `allow`, or as a deny or ask rule in Claude Code's own managed settings on the device, whether or not the rule covers the folder. They are not avai…
Installation and setup
Claude Documentation · in the page
third-party/claude-desktop/installation
…icy's list leaves this group out, or a policy lists the group under **Deny log on as a service**, the virtual machine can't start. Run these checks on an affected device, or before rollout on a devic…
SSH remote sessions in Claude Desktop on 3P
Claude Documentation · in the page
third-party/claude-desktop/ssh-remote-sessions
…acefolders) entry by supplying Claude Code with permission rules that deny edits under the entry's path. The rules are Claude Code's own checks on what Claude does, not file permissions on the host. W…
Security Policy
Model Context Protocol · in the page
community/security
…at one stdio peer can crash, hang, exhaust resources of, or otherwise deny service to the other are out of scope and should be filed as regular issues rather than as a GHSA. If the affected SDK code i…
Connect to local MCP servers
Model Context Protocol · in the page
docs/2024-11-05/develop/connect-local-servers
…e494) Review each request carefully before approving. You can always deny a request if you're not comfortable with the proposed action. ## Troubleshooting If you encounter issues setting up or usin…
Understanding MCP clients
Model Context Protocol · in the page
docs/2024-11-05/learn/client-concepts
…can show what the server wants to analyze and why. Users can approve, deny, or modify requests. **Transparency features**: Clients can display the exact prompt, model selection, and token limits, all…
Security Best Practices
Model Context Protocol · in the page
docs/2024-11-05/tutorials/security/security_best_practices
…t iframing via `frame-ancestors` CSP directive or `X-Frame-Options: DENY` to prevent clickjacking **Consent Cookie Security** If using cookies to track consent decisions, they **MUST**: * Use `__…
Connect to local MCP servers
Model Context Protocol · in the page
docs/2025-03-26/develop/connect-local-servers
…e494) Review each request carefully before approving. You can always deny a request if you're not comfortable with the proposed action. ## Troubleshooting If you encounter issues setting up or usin…
Understanding MCP clients
Model Context Protocol · in the page
docs/2025-03-26/learn/client-concepts
…can show what the server wants to analyze and why. Users can approve, deny, or modify requests. **Transparency features**: Clients can display the exact prompt, model selection, and token limits, all…
Security Best Practices
Model Context Protocol · in the page
docs/2025-03-26/tutorials/security/security_best_practices
…t iframing via `frame-ancestors` CSP directive or `X-Frame-Options: DENY` to prevent clickjacking **Consent Cookie Security** If using cookies to track consent decisions, they **MUST**: * Use `__…
Connect to local MCP servers
Model Context Protocol · in the page
docs/2025-06-18/develop/connect-local-servers
…e494) Review each request carefully before approving. You can always deny a request if you're not comfortable with the proposed action. ## Troubleshooting If you encounter issues setting up or usin…
Understanding MCP clients
Model Context Protocol · in the page
docs/2025-06-18/learn/client-concepts
…can show what the server wants to analyze and why. Users can approve, deny, or modify requests. **Transparency features**: Clients can display the exact prompt, model selection, and token limits, all…
Security Best Practices
Model Context Protocol · in the page
docs/2025-06-18/tutorials/security/security_best_practices
…t iframing via `frame-ancestors` CSP directive or `X-Frame-Options: DENY` to prevent clickjacking **Consent Cookie Security** If using cookies to track consent decisions, they **MUST**: * Use `__…
Connect to local MCP servers
Model Context Protocol · in the page
docs/2025-11-25/develop/connect-local-servers
…e494) Review each request carefully before approving. You can always deny a request if you're not comfortable with the proposed action. ## Troubleshooting If you encounter issues setting up or usin…
Understanding MCP clients
Model Context Protocol · in the page
docs/2025-11-25/learn/client-concepts
…can show what the server wants to analyze and why. Users can approve, deny, or modify requests. **Transparency features**: Clients can display the exact prompt, model selection, and token limits, all…
Security Best Practices
Model Context Protocol · in the page
docs/2025-11-25/tutorials/security/security_best_practices
…t iframing via `frame-ancestors` CSP directive or `X-Frame-Options: DENY` to prevent clickjacking **Consent Cookie Security** If using cookies to track consent decisions, they **MUST**: * Use `__…
Connect to local MCP servers
Model Context Protocol · in the page
docs/2026-07-28/develop/connect-local-servers
…e494) Review each request carefully before approving. You can always deny a request if you're not comfortable with the proposed action. ## Troubleshooting If you encounter issues setting up or usin…
Understanding MCP clients
Model Context Protocol · in the page
docs/2026-07-28/learn/client-concepts
…can show what the server wants to analyze and why. Users can approve, deny, or modify requests. **Transparency features**: Clients can display the exact prompt, model selection, and token limits, all…
Local Server Security
Model Context Protocol · in the page
docs/2026-07-28/tutorials/security/local-server-security
…nations. Traffic anywhere else is a signal worth investigating. * **Deny network where none is needed.** Servers that operate purely on local files or tools need no network at all — with container…
Security Best Practices
Model Context Protocol · in the page
docs/2026-07-28/tutorials/security/security_best_practices
…t iframing via `frame-ancestors` CSP directive or `X-Frame-Options: DENY` to prevent clickjacking **Consent Cookie Security** If using cookies to track consent decisions, they **MUST**: * Use `__…
Connect to local MCP servers
Model Context Protocol · in the page
docs/draft/develop/connect-local-servers
…e494) Review each request carefully before approving. You can always deny a request if you're not comfortable with the proposed action. ## Troubleshooting If you encounter issues setting up or usin…
Understanding MCP clients
Model Context Protocol · in the page
docs/draft/learn/client-concepts
…can show what the server wants to analyze and why. Users can approve, deny, or modify requests. **Transparency features**: Clients can display the exact prompt, model selection, and token limits, all…
Local Server Security
Model Context Protocol · in the page
docs/draft/tutorials/security/local-server-security
…nations. Traffic anywhere else is a signal worth investigating. * **Deny network where none is needed.** Servers that operate purely on local files or tools need no network at all — with container…
Security Best Practices
Model Context Protocol · in the page
docs/draft/tutorials/security/security_best_practices
…t iframing via `frame-ancestors` CSP directive or `X-Frame-Options: DENY` to prevent clickjacking **Consent Cookie Security** If using cookies to track consent decisions, they **MUST**: * Use `__…
Build an MCP App
Model Context Protocol · in the page
extensions/apps/build
…. The UI resource will eventually be rendered in a secure iframe with deny-by-default CSP configuration. If your app has CSS and JS assets, you will need to [configure CSP](https://apps.extensions.mod…
Sampling
Model Context Protocol · in the page
specification/2024-11-05/client/sampling
…there **SHOULD** always > be a human in the loop with the ability to deny sampling requests. > > Applications **SHOULD**: > > * Provide UI that makes it easy and intuitive to review sampling requests…
Tools
Model Context Protocol · in the page
specification/2024-11-05/server/tools
…there **SHOULD** always > be a human in the loop with the ability to deny tool invocations. > > Applications **SHOULD**: > > * Provide UI that makes clear which tools are being exposed to the AI mode…
Sampling
Model Context Protocol · in the page
specification/2025-03-26/client/sampling
…there **SHOULD** always > be a human in the loop with the ability to deny sampling requests. > > Applications **SHOULD**: > > * Provide UI that makes it easy and intuitive to review sampling requests…
Tools
Model Context Protocol · in the page
specification/2025-03-26/server/tools
…there **SHOULD** always > be a human in the loop with the ability to deny tool invocations. > > Applications **SHOULD**: > > * Provide UI that makes clear which tools are being exposed to the AI mode…