16 pages for --allowed.

Best practices for Claude Code Claude Code CLI · in the page best-practices …files <Tip> Loop through tasks calling `claude -p` for each. Use `--allowedTools` to scope permissions for batch operations. </Tip> For large migrations or analyses, you can distribute work acros… Claude Code changelog Claude Code CLI · in the page changelog …w/deny rules, model or effort flags * Fixed `/tui` dropping launch `--allowed-tools`/`--disallowed-tools` rules when it restarts; it now declines to switch, with the reason, when the session has res… CLI reference Claude Code CLI · in the page cli-reference …low-dangerously-skip-permissions` | | `--allowedTools`, `--allowed-tools` | Tools that execute without prompting for permission. See [permission rule syntax]… Desktop application Claude Code CLI · in the page desktop …| | `--allowedTools`, `--disallowedTools` | No per-session equivalent. Permission rules in [settings files](/docs/en/settings) still ap… Error reference Claude Code CLI · in the page errors …aller added ask rules alongside the rules Claude Code passes back as `--allowed-tools` and `--disallowed-tools`. No flag exists for ask rules * `permission rules a command line cannot carry intact` an… Fullscreen rendering Claude Code CLI · in the page fullscreen …](/docs/en/model-config#setting-your-model) * Rules you passed with [`--allowed-tools` or `--disallowed-tools`](/docs/en/cli-reference#cli-flags), and your `--agent`, `--agents`, and `--append-system-… Claude Code GitHub Actions Claude Code CLI · in the page github-actions …pull/${{ github.event.pull_request.number }}" claude_args: '--allowedTools "mcp__github_inline_comment__create_inline_comment"' ``` Two lines in this workflow control where the review goes:… Claude Code GitLab CI/CD Claude Code CLI · in the page gitlab-ci-cd …nt the requested changes'}" --permission-mode acceptEdits --allowedTools "Bash Read Edit Write mcp__gitlab" --debug ``` After adding the job and your `ANTHROPIC_API_KEY` variable, t… Run Claude Code programmatically Claude Code CLI · in the page headless …ed: ```bash theme={null} claude -p "Find and fix the bug in auth.py" --allowedTools "Read,Edit,Bash" ``` This page covers using the Agent SDK via the CLI (`claude -p`). For the Python and TypeScript… Deploy managed settings Claude Code CLI · in the page managed-settings …ignore permission rules from user, project, and local files and from `--allowedTools`: ```json managed-settings.json theme={null} { "permissions": { "deny": [ "Read(./… Monitoring Claude Code CLI · in the page monitoring-usage …ny rules in the user's personal settings, enterprise managed policy, `--allowedTools` or `--disallowedTools` flags, the active permission mode, a session-scoped grant from an earlier prompt in the sam… Choose a permission mode Claude Code CLI · in the page permission-modes …| `claude -p "run the test suite" --permission-mode dontAsk --allowedTools "Bash(npm test)" "Read"` | None beyond what your… Configure permissions Claude Code CLI · in the page permissions …tched-by-file-permission-checks), except for a `Glob` rule passed in `--allowedTools`. Use `Edit(docs/**)` in place of `Write(docs/**)`, `NotebookEdit(docs/**)`, or `MultiEdit(docs/**)`, and `Read(doc… Customize sessions in self-hosted environments Claude Code CLI · in the page self-hosted-environments-configuration …mission-mode auto ``` To pre-approve specific tools instead, append `--allowed-tools` with your rules, for example `--allowed-tools "Bash(bazel *) Bash(yarn *) mcp__internal__*"`. List flags such as… Claude Code settings reference Claude Code CLI · in the page settings-reference …nores rules in user, project, local, and `--settings` files, ignores `--allowedTools`, hides the always-allow choices in permission prompts, and stops saving new rules. When [parent settings from an e… Tools reference Claude Code CLI · in the page tools-reference …issions-deny) in settings, and the `/permissions` interface * in the `--allowedTools` and `--disallowedTools` [CLI flags](/docs/en/cli-reference) * in the Agent SDK's [`allowedTools` and `disallowedTo…