110 pages for /permissions.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
Permissions
Claude Developer Platform · path
api/beta/organization/rbac_roles/permissions
List RBAC Role Permissions
Claude Developer Platform · path
api/beta/organization/rbac_roles/permissions/list
Permissions
Claude Developer Platform · path
api/compliance/organizations/roles/permissions
List Compliance Role Permissions
Claude Developer Platform · path
api/compliance/organizations/roles/permissions/list
Configure permissions
Claude Code CLI · path
agent-sdk/permissions
RBAC Roles
Claude Developer Platform · in the page
api/beta/organization/rbac_roles
…Role Permissions **GET** `/v1/organizations/rbac_roles/{rbac_role_id}/permissions` List the permissions an RBAC Role grants. The RBAC Roles API is available to Claude Enterprise organizations only.…
Organizations
Claude Developer Platform · in the page
api/compliance/organizations
…ions **GET** `/v1/compliance/organizations/{org_uuid}/roles/{role_id}/permissions` List Compliance Role Permissions #### Path parameters - `org_uuid: string` The organization UUID - `role_id:…
Roles
Claude Developer Platform · in the page
api/compliance/organizations/roles
…ions **GET** `/v1/compliance/organizations/{org_uuid}/roles/{role_id}/permissions` List Compliance Role Permissions #### Path parameters - `org_uuid: string` The organization UUID - `role_id:…
compliance-org-data
Claude Developer Platform · in the page
manage-claude/compliance-org-data
…https://platform.claude.com/docs/en/api/compliance/organizations/roles/permissions/list). To audit historical role assignments and permission changes, query the RBAC activity types (for example, `rbac…
user-management
Claude Developer Platform · in the page
manage-claude/user-management
…/{rbac_role_id}`<br />`GET /v1/organizations/rbac_roles/{rbac_role_id}/permissions` | Read your organiza…
Set up Claude Code for your organization
Claude Code CLI · in the page
admin-setup
…tools, commands, and integrations are allowed | [Permissions](/docs/en/permissions.md), [Sandboxing](/docs/en/sandboxing.md) | | [Set up usage visibility](#set-up-usage-visibility) | How you track spe…
How the agent loop works
Claude Code CLI · in the page
agent-sdk/agent-loop
…ools without prompting, apart from reads from [network paths](/docs/en/permissions.md#network-paths). Tools not listed are still available, and calls to them that need approval fall through to the per…
Use Claude Code features in the SDK
Claude Code CLI · in the page
agent-sdk/claude-code-features
…option, which the SDK passes to Claude Code as [`--add-dir`](/docs/en/permissions#additional-directories-grant-file-access-not-configuration) | | `"user"` | User `settings.json`; user CLAUDE.md and `…
Configure your agent
Claude Code CLI · in the page
agent-sdk/configuration
…s. For more information, see [Allow and deny rules](/docs/en/agent-sdk/permissions.md#allow-and-deny-rules). ## Load settings files Settings files supply configuration beyond the options object. Two…
Track cost and usage
Claude Code CLI · in the page
agent-sdk/cost-tracking
…- Getting started with the SDK * [SDK Permissions](/docs/en/agent-sdk/permissions.md) - Managing tool permissions
Give Claude custom tools
Claude Code CLI · in the page
agent-sdk/custom-tools
…n available; calls go through the [permission flow](/docs/en/agent-sdk/permissions.md). | | disallowed tools | Both | A bare tool name such as `"Bash"` removes the tool from Claude's context, the same…
Rewind file changes with checkpointing
Claude Code CLI · in the page
agent-sdk/file-checkpointing
…rompt. For more information, see [Permission modes](/docs/en/agent-sdk/permissions.md#permission-modes). **2. Capture checkpoint UUID and session ID** With the `replay-user-messages` option set, eac…
Intercept and control agent behavior with hooks
Claude Code CLI · in the page
agent-sdk/hooks
…hout user confirmation, apart from reads from [network paths](/docs/en/permissions.md#network-paths), while leaving all other tools subject to normal permission checks: ```python Python theme={null}…
Connect to external tools with MCP
Claude Code CLI · in the page
agent-sdk/mcp
…ll tool names in `allowedTools` and in [MCP permission rules](/docs/en/permissions.md#mcp). For a server that a [plugin](/docs/en/agent-sdk/plugins.md) provides, `<server-name>` takes the [plugin-scop…
Modifying system prompts
Claude Code CLI · in the page
agent-sdk/modifying-system-prompts
…ks](/docs/en/agent-sdk/hooks.md), and [permissions](/docs/en/agent-sdk/permissions.md) also shape behavior outside the system prompt and are covered on their own pages. ### CLAUDE.md files for projec…
Agent SDK overview
Claude Code CLI · in the page
agent-sdk/overview
…automatically, which need approval | [Permissions](/docs/en/agent-sdk/permissions.md) | | Sessions | Maintain context across exchanges, resume or fork later | [Sessions](/docs/en/agent-sdk/sessions.m…
Agent SDK reference - Python
Claude Code CLI · in the page
agent-sdk/python
…session in `auto` mode [changes to `default` mode](/docs/en/agent-sdk/permissions#auto-mode-auto) if the new model doesn't support auto mode | | `rewind_files(user_message_id)` | Restore files to the…
Quickstart
Claude Code CLI · in the page
agent-sdk/quickstart
…order, described in [How permissions are evaluated](/docs/en/agent-sdk/permissions.md#how-permissions-are-evaluated). For the full list of modes, their behavior, and when to use each, see [Permission…
Securely deploying AI agents
Claude Code CLI · in the page
agent-sdk/secure-deployment
…n set policies that apply across all users. See [permissions](/docs/en/permissions.md). * **Command parsing for permissions**: Before executing bash commands, Claude Code parses them into an AST and m…
Extend agents with skills
Claude Code CLI · in the page
agent-sdk/skills
…es and the `canUseTool` callback, see [Permissions](/docs/en/agent-sdk/permissions.md). ## Troubleshooting ### Skills not found **Check settingSources configuration**: the SDK discovers skills thro…
Stream responses in real-time
Claude Code CLI · in the page
agent-sdk/streaming-output
…typed JSON responses from the agent * [Permissions](/docs/en/agent-sdk/permissions.md): control which tools the agent can use
Subagents in the SDK
Claude Code CLI · in the page
agent-sdk/subagents
…within this agent. The [subagent inheritance rules](/docs/en/agent-sdk/permissions.md#available-modes) decide when it applies | In the Python SDK, multi-word field names such as `disallowedTools` and…
Track todos
Claude Code CLI · in the page
agent-sdk/todo-tracking
…g: * Name one of the tools in the [`allowedTools`](/docs/en/agent-sdk/permissions#allow-and-deny-rules) (TypeScript) or `allowed_tools` (Python) option * List the tools in the `tools` option, which r…
Agent SDK reference - TypeScript
Claude Code CLI · in the page
agent-sdk/typescript
…also [loads the directory's skills, commands, and subagents](/docs/en/permissions.md#additional-directories-grant-file-access-not-configuration) | | `agent` | `string` | `undefined` | Agent name for…
Handle approvals and user input
Claude Code CLI · in the page
agent-sdk/user-input
…ool that isn't auto-approved by a [permission rule](/docs/en/agent-sdk/permissions.md) or permission mode. Check `tool_name` for the tool (e.g., `"Bash"`, `"Write"`). 2. **Claude asks a question**: Cl…
Orchestrate teams of Claude Code sessions
Claude Code CLI · in the page
agent-teams
…tory only if you've [trusted the folder the agent file is in](/docs/en/permissions.md#what-runs-before-you-trust-a-folder). Trusting a parent folder doesn't count. Until then, the teammate comes back…
Manage multiple agents with agent view
Claude Code CLI · in the page
agent-view
…``` If you haven't yet accepted the [workspace trust dialog](/docs/en/permissions.md#project-allow-rules-and-workspace-trust) for the directory, Claude Code shows it before agent view opens, the same…
Track team usage with analytics
Claude Code CLI · in the page
analytics
…d): set spend limits and optimize token usage * [Permissions](/docs/en/permissions.md): configure roles and permissions
Share session output as artifacts
Claude Code CLI · in the page
artifacts
…To let Claude read a file outside your [working directories](/docs/en/permissions.md#working-directories) without your approval, add its folder as a working directory with [`--add-dir`](/docs/en/cli-…
Configure auto mode
Claude Code CLI · in the page
auto-mode-config
…checkpoint The most direct mechanism is [`permissions.ask`](/docs/en/permissions#permission-rule-syntax). Content-scoped ask rules like the ones below are evaluated before the classifier and always…
Best practices for Claude Code
Claude Code CLI · in the page
best-practices
…he prompt. * **Give URLs** for documentation and API references. Use `/permissions` to allowlist frequently used domains. * **Pipe in data** by running `cat error.log | claude -p "explain this error"`…
Champion kit
Claude Code CLI · in the page
champion-kit
…proposes changes without editing your source. | [Permissions](/docs/en/permissions.md) | | "Is the setup worth the effort?" | Installation takes roughly two minutes, runs in the terminal, and requires…
Claude Code changelog
Claude Code CLI · in the page
changelog
…eway being rejected when `OTEL_EXPORTER_OTLP_HEADERS` is set * Fixed `/permissions` > Recently denied not showing the denied shell command, and auto mode's local classifier ignoring an approval from t…
Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry
Claude Code CLI · in the page
claude-apps-gateway
…n force either way; [they're evaluated before any allow rule](/docs/en/permissions.md#manage-permissions). Claude Code forwards parent-supplied [`sandbox.credentials`](/docs/en/settings-reference#san…
Claude apps gateway configuration
Claude Code CLI · in the page
claude-apps-gateway-config
…` / `.deny` | CLI | Tool and command rules. See [Permissions](/docs/en/permissions.md). | | `permissions.disableBypassPermissionsMode` | CLI | Set to `disable` to block [`bypassPermissions`](/docs/en/…
Explore the .claude directory
Claude Code CLI · in the page
claude-directory
…Claude follows them or not.', contains: [<><A href="/docs/en/permissions">permissions</A>: allow, deny, or prompt before Claude uses specific tools or commands</>, <><A href="/docs/en/hooks"…
Let Claude coordinate ongoing work with Projects
Claude Code CLI · in the page
claude-projects
…e broader option. Cloud threads don't read [permission rules](/docs/en/permissions.md) from a repository's `.claude/settings.json`, so you rely on auto mode and on the approvals you give inside each t…
CLI reference
Claude Code CLI · in the page
cli-reference
…dit files. Grants file access; Claude Code [doesn't discover](/docs/en/permissions#additional-directories-grant-file-access-not-configuration) most `.claude/` configuration from these directories. Val…
Commands
Claude Code CLI · in the page
commands
…ude to create any [subagents](/docs/en/sub-agents) you want, and run `/permissions` to set your approval rules. **During a task.** `/plan` switches into plan mode before a large change. `/model` and…
Common workflows
Claude Code CLI · in the page
common-workflows
…files: * **Block specific paths**: add a [`Read` deny rule](/docs/en/permissions#read-and-edit) for them. Claude Code doesn't include a file that the rule matches. * **Stop `@` references from inclu…
Communications kit
Claude Code CLI · in the page
communications-kit
…posal to review. 📖 Permission modes → https://code.claude.com/docs/en/permissions ``` **Checkpointing and `/rewind`** ```markdown theme={null} ⏪ *Tip: There is an undo button for the whole conversa…
Run Claude Code behind a corporate launcher
Claude Code CLI · in the page
corporate-launcher
…DE_CODE_PROCESS_WRAPPER` reference entry * [Managed settings](/docs/en/permissions.md#managed-settings): deliver the `env` block across a fleet * [Launcher error reference](/docs/en/errors.md#claude_c…
Message your other Claude Code sessions
Claude Code CLI · in the page
cross-session-messaging
…. * **Stop sending and listing**: add [permission deny rules](/docs/en/permissions.md#tool-specific-permission-rules) naming `SendMessage` and `ListAgents`. Both take the bare tool name with no specif…
Data usage
Claude Code CLI · in the page
data-usage
…e blocklist, so combine it with [`WebFetch` permission rules](/docs/en/permissions#webfetch) if you need to restrict which domains Claude can reach.
Debug your configuration
Claude Code CLI · in the page
debug-your-config
…nfigurations | | `/mcp` | Connected MCP servers and their status | | `/permissions` | Resolved allow and deny rules currently in effect | | `/doctor` | Setup checkup: installation health, invalid sett…