386 pages for permissions.

Code intelligence plugins Claude Code CLI · in the page plugins/code-intelligence …tool is read-only. For what Claude can look up with the tool and how permissions apply to it, see [LSP tool behavior](/docs/en/tools-reference.md#lsp-tool-behavior). ### Read the diagnostics yoursel… Add components to a plugin Claude Code CLI · in the page plugins/components …in_db__query`. That is the name to use in [permission rules](/docs/en/permissions.md) and [hook matchers](#hooks) * **Substitution**: `${CLAUDE_PLUGIN_ROOT}` and the other [path variables](#path-varia… Host and maintain a marketplace Claude Code CLI · in the page plugins/host-marketplace …` | Only after the user accepts the [workspace trust dialog](/docs/en/permissions.md#what-runs-before-you-trust-a-folder) for that folder itself. A `-p` or SDK session doesn't count as accepting it, a… Plugin loading reference Claude Code CLI · in the page plugins/loading …claude/skills/` of the session's [primary working directory](/docs/en/permissions.md#working-directories) and, unlike plain skills and commands, doesn't [search parent directories](/docs/en/skills.md#… Manage mods for your organization Claude Code CLI · in the page plugins/mods/admin …s/overview.md) is a plugin that runs code inside Claude Code with the permissions of the user who installed it. Mods aren't sandboxed. Through [managed settings](/docs/en/managed-settings.md), you dec… Use the mods API Claude Code CLI · in the page plugins/mods/api …ystem, processes, and the network through the mods API, with the same permissions as the user running Claude Code. The hooks module itself has no Node.js APIs, no timer globals such as `setTimeout`, a… React to events with a mod Claude Code CLI · in the page plugins/mods/events …ision. For a fixed command or path, use a [permission rule](/docs/en/permissions.md#permission-rule-syntax) such as `Bash(npm test)`, which takes no code. Handle `tool.check` when the decision depend… Mods overview Claude Code CLI · in the page plugins/mods/overview …l or update a mod > [!WARNING] > > A mod is code that runs with your permissions. It can read and write your files, start processes, and make network requests. Install mods only from authors and mark… Manage Claude Code plugins for your organization Claude Code CLI · in the page plugins/org …y after the contributor accepts the [workspace trust dialog](/docs/en/permissions.md#what-runs-before-you-trust-a-folder) for that folder. * **[Non-interactive `-p` runs](/docs/en/headless)**: the ent… Plugins overview Claude Code CLI · in the page plugins/overview …h session where it's enabled, and its hooks fire at their events. * **Permissions**: what the plugin runs, it runs as you. See [Plugin security and trust](/docs/en/plugins/security.md) for what to rev… Plugin security and trust Claude Code CLI · in the page plugins/security …lugins/mods/overview.md) runs JavaScript inside Claude Code with your permissions. To list what a mod does before you install it, see [Decide whether to trust a mod](/docs/en/plugins/mods/overview.md#… Troubleshoot plugins Claude Code CLI · in the page plugins/troubleshooting …tall again * When the message says to check the plugin cache folder's permissions, restore your write permission on the folder it names and free disk space, then run the install again ### Dependency… How Claude Code uses prompt caching Claude Code CLI · in the page prompt-caching …you whether it did. * When you [move the session with `/cd`](/docs/en/permissions#move-the-session-to-another-directory) on v2.1.246 or later, Claude Code applies the plugins the new directory's setti… Continue local sessions from any device with Remote Control Claude Code CLI · in the page remote-control …e-projects.md) threads follows that setting instead, except in `bypassPermissions` mode. Requires Claude Code v2.1.273 or later. | | `-d`, `--debug[=<filter>]` | Turn on debug logging for the server,… Automate work with scheduled tasks Claude Code CLI · in the page routines …Requires Claude Code v2.1.227 or later. ### Repositories and branch permissions Scheduled tasks need GitHub access to clone repositories. When you create a scheduled task from the CLI with `/schedu… Choose a sandbox environment Claude Code CLI · in the page sandbox-environments …th `/sandbox` | | Let Claude work unattended with `--dangerously-skip-permissions` or auto mode | The preconfigured [dev container](/docs/en/devcontainer.md), any container or VM, or the [sandbox runt… Configure the sandboxed Bash tool Claude Code CLI · in the page sandboxing …y, a per-user temp directory, and [directories you've added](/docs/en/permissions.md#additional-directories-grant-file-access-not-configuration). [Protected paths](#protected-paths) stay write-denied… Run prompts on a schedule Claude Code CLI · in the page scheduled-tasks …de as plain text instead of executing: * Built-in commands such as `/permissions`, `/model`, or `/clear` * Skills marked [`disable-model-invocation: true`](/docs/en/skills#frontmatter-reference), inc… Security Claude Code CLI · in the page security …-with-auto-mode) * **Manual mode**: Claude Code starts with read-only permissions. When it needs to edit files, run tests, or execute commands, it asks you first, and you choose whether to approve the… Catch security issues as Claude writes code Claude Code CLI · in the page security-guidance …s: edits under `.github/workflows/`, which can grant repository-level permissions The check runs after the edit lands and appends the warning to Claude's context for the next step. Each warning fires… Self-hosted environments Claude Code CLI · in the page self-hosted-environments …ion credentials, lifecycle hooks, on-demand runners, MCP servers, and permissions * [Test end to end](/docs/en/self-hosted-environments-testing.md): a CI smoke test that verifies a runner image before… Customize sessions in self-hosted environments Claude Code CLI · in the page self-hosted-environments-configuration …of the runner host's config that the runner captures at startup; see [Permissions and tool approval](#permissions-and-tool-approval). Writes here are isolated to this session. The directory stays unde… Deploy self-hosted environments to production Claude Code CLI · in the page self-hosted-environments-deploy …nalDirectories` entry, an `Edit`, `Write`, or `NotebookEdit` rule in `permissions.allow`, or a `sandbox.filesystem.allowWrite` or `allowRead` entry * A non-empty `env` block * An operator-posture… Self-hosted environments quickstart Claude Code CLI · in the page self-hosted-environments-quickstart …wrapper scripts, lifecycle hooks, on-demand runners, MCP servers, and permissions * [Test end to end](/docs/en/self-hosted-environments-testing.md): a CI smoke test that dispatches a session and reads… Self-hosted environments reference Claude Code CLI · in the page self-hosted-environments-reference …logs to a file in addition to stdout and stderr, created with `0600` permissions. Required for `self-hosted-runner doctor` to tail logs locally. | | `--log-level <level>` | none | `info` | `info` or… Configure server-managed settings Claude Code CLI · in the page server-managed-settings …xample enforces a permission deny list, prevents users from bypassing permissions, and restricts permission rules to those defined in managed settings. The `Bash(curl *)` rule matches `curl` [as Claud… Manage sessions Claude Code CLI · in the page sessions …iginal directory, provided you have [trusted that workspace](/docs/en/permissions.md#project-allow-rules-and-workspace-trust), and then the directory you resume from, so a project-scoped agent still l… Claude Code settings Claude Code CLI · in the page settings …ed securely) **Project scope** is best for: * Team-shared settings (permissions, hooks, MCP servers) * Plugins the whole team should have * Standardizing tooling across collaborators **Local scope*… Example settings files Claude Code CLI · in the page settings-example …erTipsEnabled": false, "preferredNotifChannel": "terminal_bell", "permissions": { "allow": [ "Bash(git diff *)", "Read(~/.zshrc)" ] }, "autoUpdatesChannel": "stable", "cl… All settings Claude Code CLI · in the page settings-reference …-settings.md) the only settings source of [permission rules](/docs/en/permissions.md#managed-settings) | Permission settings | Managed | | [`alwaysThinkingEnabled`](#alwaysthinkingenabled) | Turn [ext… Extend Claude with skills Claude Code CLI · in the page skills …rate into skills and nested `CLAUDE.md` files that load on demand * **Permissions**: an offer to make [auto mode](/docs/en/permissions.md#permission-modes) your default permission mode and to [pre-app… Claude Code in Slack Claude Code CLI · in the page slack …lay a dropdown allowing you to choose the correct one. ## Access and permissions ### User-level access | Access Type | Requirement | | :- | :- | | Claude Code Sessions | Each user runs sessions und… Customize your status line Claude Code CLI · in the page statusline …r the same [workspace trust rule as hooks in settings files](/docs/en/permissions.md#what-runs-before-you-trust-a-folder). Accepting the dialog for the folder, or for a parent directory whose trust ex… Create custom subagents Claude Code CLI · in the page sub-agents …ow with a custom system prompt, specific tool access, and independent permissions. It also sends its own requests, which count toward the same [usage limits](/docs/en/costs.md#plan-usage-breakdown) as… Configure your terminal for Claude Code Claude Code CLI · in the page terminal-config …audeShimmer` > * `warning` and `warningShimmer` > * `permission` and `permissionShimmer` > * `promptBorder` and `promptBorderShimmer` > * `inactive` and `inactiveShimmer` > * `fastMode` and `fastModeS… Enterprise deployment overview Claude Code CLI · in the page third-party-integrations …d quickly. **Claude for Enterprise** adds domain capture, role-based permissions, and compliance API access. Best for larger organizations with security and compliance requirements. Learn more about… Tools reference Claude Code CLI · in the page tools-reference …ol names are the exact strings you use in [permission rules](/docs/en/permissions.md#tool-specific-permission-rules), [subagent tool lists](/docs/en/sub-agents.md), and [hook matchers](/docs/en/hooks.… Troubleshoot installation and login Claude Code CLI · in the page troubleshoot-install …CES: permission denied` during install | [Fix the install directory's permissions](#permission-errors-during-installation) | | `TLS connect error` or `SSL/TLS secure channel` | [Update CA certificates… Use Claude Code in VS Code Claude Code CLI · in the page vs-code …as MCP servers, commands, output styles, hooks, memory, instructions, permissions, and plugins. Items with a terminal icon open in the integrated terminal. * To browse commands such as `/usage` or… Get started with Claude Code in the cloud Claude Code CLI · in the page web-quickstart …it before editing files Cloud sessions don't offer Manual or Bypass permissions. See the [full list of permission modes](/docs/en/permission-modes.md#available-modes) for what each one allows. **3.… Week 13 · March 23–27, 2026 Claude Code CLI · in the page whats-new/2026-w13 # Week 13 · March 23–27, 2026 > Auto mode for hands-off permissions, computer use built in, PR auto-fix in the cloud, transcript search, and a PowerShell tool for Windows. Releases [v2.1.83 → v2.1.8… Week 14 · March 30 – April 3, 2026 Claude Code CLI · in the page whats-new/2026-w14 …(return `retry: true` to let Claude try a different approach), and `/permissions` → Recently denied lets you retry manually with `r`New `defer` value for `permissionDecision` in `PreToolUse` hooks: `… Week 15 · April 6–10, 2026 Claude Code CLI · in the page whats-new/2026-w15 …k powered by Mantle: set `CLAUDE_CODE_USE_MANTLE=1`Hardened Bash tool permissions: backslash-escaped flags, env-var prefixes, `/dev/tcp` redirects, and compound commands now prompt correctly`UserPromp… Week 16 · April 13–17, 2026 Claude Code CLI · in the page whats-new/2026-w16 …for `/rewind`, and `/proactive` is an alias for `/loop`Hardened Bash permissions: deny rules now match through `env`/`sudo`/`watch` wrappers, and `Bash(find:*)` allow rules no longer auto-approve `-e… Week 18 · April 27 – May 1, 2026 Claude Code CLI · in the page whats-new/2026-w18 …output) and exits 0 on completion or 1 on failure`--dangerously-skip-permissions` now bypasses prompts for writes to `.claude/`, `.git/`, `.vscode/`, shell config files, and other previously protecte… Week 20 · May 11–15, 2026 Claude Code CLI · in the page whats-new/2026-w20 …dir`, `--permission-mode`, `--model`, `--effort`, `--dangerously-skip-permissions`) to configure background sessions, and `claude agents --cwd <path>` scopes the session list to a directoryNew hook `a… Week 23 · June 1–5, 2026 Claude Code CLI · in the page whats-new/2026-w23 …yaml`. These writes are never auto-approved in any mode except `bypassPermissions`. Work in acceptEdits mode; Claude now pauses before writing these files: ```bash terminal theme={null} claude --per… Week 24 · June 8–12, 2026 Claude Code CLI · in the page whats-new/2026-w24 …nts do not load. Authentication, model selection, built-in tools, and permissions still work. If a problem disappears in safe mode, one of those surfaces is the cause. Launch a clean session to isola… Week 25 · June 15–19, 2026 Claude Code CLI · in the page whats-new/2026-w25 …`settings.json`: ```json .claude/settings.json {3} theme={null} { "permissions": { "deny": ["Agent(model:opus)"] } } ``` [Match by input parameter](/docs/en/permissions.md#match-by-input-par… Week 26 · June 22–26, 2026 Claude Code CLI · in the page whats-new/2026-w26 …nd denial reasons now show in the transcript, the denial toast, and `/permissions`New `claude_code.assistant_response` OpenTelemetry log event carries the model's response text; deployments that alrea…