390 pages for permissions.

Week 23 · June 1–5, 2026 Claude Code CLI · in the page whats-new/2026-w23 …yaml`. These writes are never auto-approved in any mode except `bypassPermissions`. Work in acceptEdits mode; Claude now pauses before writing these files: ```bash terminal theme={null} claude --per… Week 24 · June 8–12, 2026 Claude Code CLI · in the page whats-new/2026-w24 …nts do not load. Authentication, model selection, built-in tools, and permissions still work. If a problem disappears in safe mode, one of those surfaces is the cause. Launch a clean session to isola… Week 25 · June 15–19, 2026 Claude Code CLI · in the page whats-new/2026-w25 …`settings.json`: ```json .claude/settings.json {3} theme={null} { "permissions": { "deny": ["Agent(model:opus)"] } } ``` [Match by input parameter](/docs/en/permissions.md#match-by-input-par… Week 26 · June 22–26, 2026 Claude Code CLI · in the page whats-new/2026-w26 …nd denial reasons now show in the transcript, the denial toast, and `/permissions`New `claude_code.assistant_response` OpenTelemetry log event carries the model's response text; deployments that alrea… Week 29 · July 13–17, 2026 Claude Code CLI · in the page whats-new/2026-w29 …n reader such as VoiceOver or NVDA reads in order, so you can approve permissions and review output end to end. Turn it on per session with a flag, per shell with the `CLAUDE_AX_SCREEN_READER` environ… Week 32 · August 3–7, 2026 Claude Code CLI · in the page whats-new/2026-w32 …user settings: ```json ~/.claude/settings.json {3} theme={null} { "permissions": { "defaultMode": "auto" } } ``` New sessions then show `auto mode on` in the status bar. [Auto mode requirem… Week 34 · August 17–21, 2026 Claude Code CLI · in the page whats-new/2026-w34 …onnected devices the session's current permission modeYou can open [`/permissions`](/docs/en/permissions#manage-permissions) or run `/add-dir <path>` while Claude is working; permission rule changes a… Week 35 · August 24–28, 2026 Claude Code CLI · in the page whats-new/2026-w35 …loads only managed settings and `--settings`, and refuses the `bypassPermissions` permission mode. Run a non-interactive query without the command-running tools: ```bash terminal theme={null} claud… Week 36 · August 31 – September 4, 2026 Claude Code CLI · in the page whats-new/2026-w36 …such as `/` and `.` as word breaksIf you set `defaultMode` to `"bypassPermissions"` in a project's `.claude/settings.json` or `.claude/settings.local.json`, it [no longer takes effect](/docs/en/permis… Week 37 · September 7–11, 2026 Claude Code CLI · in the page whats-new/2026-w37 …transcript or stop itIn the VS Code extension, select **Hooks** or **Permissions** in the command menu's Customize section to [add or remove hooks and permission rules](/docs/en/vs-code.md#use-the-pr… What's new Claude Code CLI · in the page whats-new/index …he middle ground between approving everything and `--dangerously-skip-permissions`. Also this week: computer use in the Desktop app, PR auto-fix on Web, transcript search with `/`, a native PowerShel… Orchestrate subagents at scale with dynamic workflows Claude Code CLI · in the page workflows …run it** or **No** selected, press `Tab` to [add a comment](/docs/en/permissions.md#add-a-comment-when-you-answer-a-permission-prompt) to your answer. Whether you see this prompt depends on your [pe… Run parallel sessions with worktrees Claude Code CLI · in the page worktrees …tings to that location. An `EnterWorktree` [permission rule](/docs/en/permissions.md) or choosing "don't ask again" doesn't suppress this prompt; only `bypassPermissions` mode skips it. Before v2.1.20… Admin controls Claude Documentation · in the page claude-science/admin-controls …eir own account; the app opens claude.ai for them to do it. Connector permissions in Enterprise custom roles apply the same way; see [Connectors](#connectors) under How other admin settings apply to C… Auto mode Claude Documentation · in the page claude-science/auto-mode …ble to you, it starts on. * **For new sessions**: go to **Settings > Permissions** and turn the **Auto mode on for new sessions** toggle off or on. * **For the current session**: open the session set… Cloud storage Claude Documentation · in the page claude-science/cloud-storage …n card. Access within the bucket is still limited to the credential's permissions. Credentials are encrypted on your computer and sent only to the provider they belong to. Claude reads and writes obj… Core concepts Claude Documentation · in the page claude-science/core-concepts …instructions for Claude to read at the start of every session. Folder permissions you grant persist across sessions within a project. A session is one conversation thread. Each session has its own wo… Use Claude Science on a corporate network Claude Documentation · in the page claude-science/corporate-networks …the member the owner of the file and both folders, and set the file's permissions to `600`. Before you deploy, have members select **Remove** under **Settings > Network > Package mirror > Mirror cred… Get started Claude Documentation · in the page claude-science/get-started …either way, and the **Ask Windows now** button under **Settings** > **Permissions** grants the permission later. **Notification-area icon.** Closing the window leaves Claude Science running, with an… Glossary Claude Documentation · in the page claude-science/glossary …bal), with every standing grant listed and revocable under Settings > Permissions. **Session**: one conversation thread inside a project, with its own kernel and workspace. **Skill**: an installable… How Claude Science works with your data Claude Documentation · in the page claude-science/how-claude-science-works-with-your-data …computer, and the rest of the local folder relies on operating-system permissions, so apply your full-disk encryption and device management policies to it. ## What Anthropic receives The app sends t… Claude Science in its own window on macOS Claude Documentation · in the page claude-science/mac-app-window …to its own window on a Mac: open, quit, and update it, and turn macOS permissions back on. On a Mac, Claude Science can now run as its own app, in its own window, rather than in the browser. If yours… Review what Claude Tag has done Claude Documentation · in the page claude-tag/admins/audit …de-tag/concepts/personal-connectors.md), which run with that member's permissions and are recorded under their name. Each action Claude takes as itself carries the service-account identity: * **In Sl… Configure GitHub access Claude Documentation · in the page claude-tag/admins/configure-github …n, such as not being an owner of that GitHub organization * A **Needs permissions** status means the installation has a pending request; **Review permissions** takes you to github.com to approve it *… Configure GitLab access Claude Documentation · in the page claude-tag/admins/configure-gitlab …ssues, posting review comments, or acting on pipelines. See GitLab's [permissions reference](https://docs.gitlab.com/user/permissions/) for what each role allows. ## Generate a personal access token… Connect GitLab Claude Documentation · in the page claude-tag/admins/connections/gitlab …ge requests, and check pipelines through the GitLab API. Covers token permissions, self-managed hostnames, and how it differs from GitHub. > [!NOTE] > > Claude Tag is in public beta. Features and beh… Connect PagerDuty Claude Documentation · in the page claude-tag/admins/connections/pagerduty …ins only see User Token keys, which also work but inherit that user's permissions. PagerDuty's own guide for creating the credential is at [support.pagerduty.com](https://support.pagerduty.com/main/d… Connect Stripe Claude Documentation · in the page claude-tag/admins/connections/stripe …he credential in Stripe Use a restricted key with read-only resource permissions, not your account's full secret key. Consider connecting test mode first. Stripe's own guide for creating the credent… Customize Claude Tag Claude Documentation · in the page claude-tag/admins/customize …g/admins/restrict-access.md#delegate-claude-tag-administration); the [permissions table](/docs/claude-tag/admins/restrict-access.md#permissions-by-role) lists each action and who can take it. | Setti… Connect an AWS role Claude Documentation · in the page claude-tag/admins/federated-access/aws …count with a short-lived identity token and calls AWS with the role's permissions. No access key is stored in Claude. The token names your organization and the [agent](/docs/claude-tag/concepts/agent-… Limits for federated agent access Claude Documentation · in the page claude-tag/admins/federated-access/limits …On services not listed above, reads such as `getIamPolicy`, `testIamPermissions`, and `tokeninfo` pass. If Claude needs one of the refused services, clear the checkbox on that connection and rely on… Federated agent access Claude Documentation · in the page claude-tag/admins/federated-access/overview …teway** | A service you run. It verifies the token, maps the agent to permissions, and forwards the request to your internal systems with credentials you hold. | You want one entry point in front of i… Troubleshoot federated agent access Claude Documentation · in the page claude-tag/admins/federated-access/troubleshooting …he block worked. If Claude needs that call, review the identity's IAM permissions first, because the block is a safeguard on top of IAM and not a replacement for it. The setting is chosen when the ide… Restrict where Claude Tag operates Claude Documentation · in the page claude-tag/admins/restrict-access …on this page require the Owner role in your Claude organization; the [permissions table](#permissions-by-role) lists which actions a channel manager or a channel member can take. On the Enterprise pla… Set up Claude Tag Claude Documentation · in the page claude-tag/admins/setup-overview …page to open the listing, then click **Add to Slack** and approve the permissions. If the app is already installed, click **Add to Slack** anyway: you reinstall over the existing app with its current… Troubleshoot Claude Tag setup Claude Documentation · in the page claude-tag/admins/troubleshooting …rors you might hit setting up and administering Claude Tag: Slack app permissions, guest and shared channels, console errors, channels and threads where nothing responds, access and connections, and s… How agent identity works Claude Documentation · in the page claude-tag/concepts/agent-identity …f the work, and it asks you before it starts. The work runs with your permissions and is recorded under your name. Requests other people make to Claude in the task's thread run with the channel's own… How Claude Tag works Claude Documentation · in the page claude-tag/concepts/how-it-works …out what a session can reach is to ask it, not to guess from your own permissions. * **Ask what Claude can reach.** In any channel, `@Claude what can you access from this channel?` lists its current… Personal connectors in channels Claude Documentation · in the page claude-tag/concepts/personal-connectors …ng your connectors in a channel. * **Access**: Claude works with your permissions and reaches only what your account can reach. * **Attribution**: Claude records what it does under your name. * **Revi… Security and data handling Claude Documentation · in the page claude-tag/concepts/security-and-data …s own tasks, after the user allows it. The work runs with that user's permissions and is recorded under their name. Requests other people make to Claude in the task's thread run with the channel's own… Claude Tag settings map Claude Documentation · in the page claude-tag/concepts/settings-map …g/admins/restrict-access.md#delegate-claude-tag-administration); the [permissions table](/docs/claude-tag/admins/restrict-access.md#permissions-by-role) lists each action and who can take it. * **Bun… Good habits for working with Claude Tag Claude Documentation · in the page claude-tag/users/good-habits …ed. Ask a Slack admin to re-approve the app, and send them [Slack app permissions](/docs/claude-tag/admins/troubleshooting.md#slack-app-permissions). Claude never pings @channel, @here, or @everyone.… Set up routines Claude Documentation · in the page claude-tag/users/proactivity …e it should run, and it uses that channel's connections with the same permissions as a typed request. ## Set up standing work ### Scheduled jobs Describe the schedule you want and the work Claude s… Troubleshoot Claude Tag in channels and DMs Claude Documentation · in the page claude-tag/users/troubleshooting …E2%80%99t-respond-in-channels-that-include-guests). * A message about permissions or access: your organization restricts who can use Claude; send your admin [the member access setting](/docs/claude-ta… Authentication for connectors Claude Documentation · in the page connectors/building/authentication …else. Scope what each user can reach with your service's own per-user permissions rather than with a per-tenant OAuth app. These cases work differently: * **SSO without a consent screen**: organizati… Directory connectors vs custom connectors Claude Documentation · in the page connectors/building/directory-vs-custom …don't bypass review by the user, and they don't grant your server any permissions the user hasn't confirmed. Organization Owners can use the same parameters on the admin path to prefill the org-wide… Model Context Protocol (MCP) Claude Documentation · in the page connectors/building/mcp …se controls: * They authenticate each connector individually * Their permissions mirror their access on the external service * They can disconnect at any time ### Tool hints All MCP tools must decl… Build a desktop extension with MCPB Claude Documentation · in the page connectors/building/mcpb …opens an installation UI where the user reviews extension details and permissions, configures required settings, grants permissions, and completes installation. Installation is per-user, so each user… Connector pre-submission checklist Claude Documentation · in the page connectors/building/review-criteria …int: true` for tools that modify or delete data. These determine auto-permissions in Claude. Read-only tools can run without per-call confirmation, and destructive tools always prompt. ### Keep tool… Test your connector Claude Documentation · in the page connectors/building/testing …ses * **Your tools**: open the connector's page and look under **Tool permissions**. Every tool your server advertises should be listed with the name and description you gave it, because those are wha…