11 pages for --disallowed.

Claude Code changelog Claude Code CLI · in the page changelog …l or effort flags * Fixed `/tui` dropping launch `--allowed-tools`/`--disallowed-tools` rules when it restarts; it now declines to switch, with the reason, when the session has restrictions a restar… CLI reference Claude Code CLI · in the page cli-reference …| | `--disallowedTools`, `--disallowed-tools` | Deny rules. A bare tool name removes the matching tools from Claude's context: `"… Desktop application Claude Code CLI · in the page desktop …| | `--allowedTools`, `--disallowedTools` | No per-session equivalent. Permission rules in [settings files](/docs/en/settings) still apply.… Error reference Claude Code CLI · in the page errors …alongside the rules Claude Code passes back as `--allowed-tools` and `--disallowed-tools`. No flag exists for ask rules * `permission rules a command line cannot carry intact` and `added directories a… Fullscreen rendering Claude Code CLI · in the page fullscreen …ig#setting-your-model) * Rules you passed with [`--allowed-tools` or `--disallowed-tools`](/docs/en/cli-reference#cli-flags), and your `--agent`, `--agents`, and `--append-system-prompt` flags Claude… Monitoring Claude Code CLI · in the page monitoring-usage …'s personal settings, enterprise managed policy, `--allowedTools` or `--disallowedTools` flags, the active permission mode, a session-scoped grant from an earlier prompt in the same interactive CLI se… Configure permissions Claude Code CLI · in the page permissions …alue)`. To match a parameter on an MCP tool, pass a deny rule with [`--disallowedTools`](/docs/en/cli-reference#cli-flags). When Claude Code loads a settings file, it skips any `mcp__` rule that has… Customize sessions in self-hosted environments Claude Code CLI · in the page self-hosted-environments-configuration …yarn *) mcp__internal__*"`. List flags such as `--allowed-tools` and `--disallowed-tools` accumulate across occurrences rather than overriding, so your rules apply on top of any rules the control plan… Claude Code settings reference Claude Code CLI · in the page settings-reference …ssion rule strings * **Default**: unset * **Per-session overrides**: `--disallowedTools` adds deny rules for one session alongside this key This example denies reads of `.env` files, the `secrets` di… Create custom subagents Claude Code CLI · in the page sub-agents …s works for both built-in and custom subagents. You can also use the `--disallowedTools` CLI flag: ```bash theme={null} claude --disallowedTools "Agent(Explore)" ``` See [Permissions documentation](… Tools reference Claude Code CLI · in the page tools-reference …ings, and the `/permissions` interface * in the `--allowedTools` and `--disallowedTools` [CLI flags](/docs/en/cli-reference) * in the Agent SDK's [`allowedTools` and `disallowedTools`](/docs/en/agent-…