Search the documentation
7 pages for --disallowedtools.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
CLI reference
Claude Code CLI · in the page
cli-reference
…| | `--disallowedTools`, `--disallowed-tools` | Deny rules. A bare tool name removes the matching tools from Claude's context: `"…
Desktop application
Claude Code CLI · in the page
desktop
…| | `--allowedTools`, `--disallowedTools` | No per-session equivalent. Permission rules in [settings files](/docs/en/settings) still apply.…
Monitoring
Claude Code CLI · in the page
monitoring-usage
…'s personal settings, enterprise managed policy, `--allowedTools` or `--disallowedTools` flags, the active permission mode, a session-scoped grant from an earlier prompt in the same interactive CLI se…
Configure permissions
Claude Code CLI · in the page
permissions
…alue)`. To match a parameter on an MCP tool, pass a deny rule with [`--disallowedTools`](/docs/en/cli-reference#cli-flags). When Claude Code loads a settings file, it skips any `mcp__` rule that has…
Claude Code settings reference
Claude Code CLI · in the page
settings-reference
…ssion rule strings * **Default**: unset * **Per-session overrides**: `--disallowedTools` adds deny rules for one session alongside this key This example denies reads of `.env` files, the `secrets` di…
Create custom subagents
Claude Code CLI · in the page
sub-agents
…s works for both built-in and custom subagents. You can also use the `--disallowedTools` CLI flag: ```bash theme={null} claude --disallowedTools "Agent(Explore)" ``` See [Permissions documentation](…
Tools reference
Claude Code CLI · in the page
tools-reference
…ings, and the `/permissions` interface * in the `--allowedTools` and `--disallowedTools` [CLI flags](/docs/en/cli-reference) * in the Agent SDK's [`allowedTools` and `disallowedTools`](/docs/en/agent-…