50 pages for deny.

Deny Spend Limit Increase Request Claude Developer Platform · title api/admin/spend_limits/increase_requests/deny mcp-connector Claude Developer Platform · in the page agents-and-tools/mcp-connector …directly from the Messages API without an MCP client, and allowlist, denylist, or configure individual tools. --- ## Compatibility - Status: Beta - [Beta header](https://platform.claude.com/docs/en/… Spend Limits Claude Developer Platform · in the page api/admin/spend_limits …tus": "approved", "type": "spend_limit_increase_request" } ``` ### Deny Spend Limit Increase Request **POST** `/v1/organizations/spend_limit_increase_requests/{spend_limit_increase_request_id}/den… Increase Requests Claude Developer Platform · in the page api/admin/spend_limits/increase_requests …atus": "approved", "type": "spend_limit_increase_request" } ``` ## Deny Spend Limit Increase Request **POST** `/v1/organizations/spend_limit_increase_requests/{spend_limit_increase_request_id}/den… Events Claude Developer Platform · in the page api/beta/sessions/events …Unique identifier for this event. - `result: "allow" or "deny"` UserToolConfirmationResult enum - `"allow"` - `"deny"` - `tool_use_id: string` The id of t… List Events Claude Developer Platform · in the page api/beta/sessions/events/list …Unique identifier for this event. - `result: "allow" or "deny"` UserToolConfirmationResult enum - `"allow"` - `"deny"` - `tool_use_id: string` The id of t… Send Events Claude Developer Platform · in the page api/beta/sessions/events/send …ToolConfirmationEventParams object` Parameters for confirming or denying a tool execution request. - `result: "allow" or "deny"` UserToolConfirmationResult enum - `"allow"`… Stream Events Claude Developer Platform · in the page api/beta/sessions/events/stream …Unique identifier for this event. - `result: "allow" or "deny"` UserToolConfirmationResult enum - `"allow"` - `"deny"` - `tool_use_id: string` The id of t… Threads Claude Developer Platform · in the page api/beta/sessions/threads …Unique identifier for this event. - `result: "allow" or "deny"` UserToolConfirmationResult enum - `"allow"` - `"deny"` - `tool_use_id: string` The id of t… Events Claude Developer Platform · in the page api/beta/sessions/threads/events …Unique identifier for this event. - `result: "allow" or "deny"` UserToolConfirmationResult enum - `"allow"` - `"deny"` - `tool_use_id: string` The id of t… List Session Thread Events Claude Developer Platform · in the page api/beta/sessions/threads/events/list …Unique identifier for this event. - `result: "allow" or "deny"` UserToolConfirmationResult enum - `"allow"` - `"deny"` - `tool_use_id: string` The id of t… Stream Session Thread Events Claude Developer Platform · in the page api/beta/sessions/threads/events/stream …Unique identifier for this event. - `result: "allow" or "deny"` UserToolConfirmationResult enum - `"allow"` - `"deny"` - `tool_use_id: string` The id of t… claude-platform-on-aws-iam-actions Claude Developer Platform · in the page api/claude-platform-on-aws-iam-actions …enies `aws-external-anthropic:Create*` still allows version creation. Deny `UpdateSkill` and `CreateSkill` as well if you need to prevent any skill mutation. </Note> ### Agents | Action | Ro… claude-platform-on-aws Claude Developer Platform · in the page build-with-claude/claude-platform-on-aws …as the primary IAM resource for Claude Platform on AWS. You grant or deny access to specific workspaces through AWS IAM policies using the workspace ARN. The ARN's resource segment is the same `wrksp… admin-api-keys Claude Developer Platform · in the page manage-claude/admin-api-keys …ude/spend-limits-api): set or clear per-user spend limits; approve or deny increase requests… cmek-aws-kms Claude Developer Platform · in the page manage-claude/cmek-aws-kms …eter, so an `EncryptionContext` condition on this action would always deny. ```bash export YOUR_ACCOUNT=$(aws sts get-caller-identity --query Account --output text) aws kms create-key \… cmek-azure-key-vault Claude Developer Platform · in the page manage-claude/cmek-azure-key-vault …dpoint and validation fails. * `net` is `"Allow"`, or, if it is `"Deny"`, that `ipRules` include Anthropic's egress ranges (contact Anthropic for the current list). * `uri` is the vault URI yo… compliance-api Claude Developer Platform · in the page manage-claude/compliance-api …ecurity server receives each governed prompt before inference and can deny it in real time, whereas the Compliance API retrieves records after the fact and returns richer data, such as organization se… inference-hooks Claude Developer Platform · in the page manage-claude/inference-hooks …rned prompt to your organization's AI security server for an allow or deny verdict before inference proceeds. --- <Note> Inference hooks are in beta and available to Claude Enterprise organizations… inference-hooks-configuration Claude Developer Platform · in the page manage-claude/inference-hooks-configuration …AI security server you choose, and hold each request for an allow or deny verdict before Claude processes it. This page walks through turning the feature on, connecting your server, and controlling e… inference-hooks-endpoint Claude Developer Platform · in the page manage-claude/inference-hooks-endpoint …signed Inference hooks requests, verifies them, and returns allow or deny verdicts. --- <Note> Inference hooks are in beta and available to Claude Enterprise organizations. Field names, request sh… spend-limits-api Claude Developer Platform · in the page manage-claude/spend-limits-api …}/approve` `POST /v1/organizations/spend_limit_increase_requests/{id}/deny` | List members' requests for a higher spend limit, with the context needed to decide; approve or deny each request. | Use t… aws Claude Developer Platform · in the page manage-claude/wif-providers/aws …claude.com/settings/workload-identity-federation?tab=history) for the deny reason and see [Troubleshoot a failed exchange](https://platform.claude.com/docs/en/manage-claude/wif-reference#troubleshoot-… Create the app registration that represents the Claude API audience. Claude Developer Platform · in the page manage-claude/wif-providers/azure …claude.com/settings/workload-identity-federation?tab=history) for the deny reason, then decode the Entra token (see [Troubleshoot a failed exchange](https://platform.claude.com/docs/en/manage-claude/w… gcp Claude Developer Platform · in the page manage-claude/wif-providers/gcp …claude.com/settings/workload-identity-federation?tab=history) for the deny reason and see [Troubleshoot a failed exchange](https://platform.claude.com/docs/en/manage-claude/wif-reference#troubleshoot-… github-actions Claude Developer Platform · in the page manage-claude/wif-providers/github-actions …ge `Authentication failed`, whichever check failed; in most cases the deny reason is recorded on the attempt's entry in the [authentication history page](https://platform.claude.com/settings/workload-… kubernetes Claude Developer Platform · in the page manage-claude/wif-providers/kubernetes …claude.com/settings/workload-identity-federation?tab=history) for the deny reason and see [Troubleshoot a failed exchange](https://platform.claude.com/docs/en/manage-claude/wif-reference#troubleshoot-… okta Claude Developer Platform · in the page manage-claude/wif-providers/okta …claude.com/settings/workload-identity-federation?tab=history) for the deny reason and see [Troubleshoot a failed exchange](https://platform.claude.com/docs/en/manage-claude/wif-reference#troubleshoot-… Replace NODE_UID with the node's UID: Claude Developer Platform · in the page manage-claude/wif-providers/spiffe …claude.com/settings/workload-identity-federation?tab=history) for the deny reason and see [Troubleshoot a failed exchange](https://platform.claude.com/docs/en/manage-claude/wif-reference#troubleshoot-… wif-reference Claude Developer Platform · in the page manage-claude/wif-reference …istinguishable error would let a caller probe rule configuration. The deny reason is recorded on the attempt's entry in the [authentication history](https://platform.claude.com/settings/workload-ident… events-and-streaming Claude Developer Platform · in the page managed-agents/events-and-streaming …ent ID in the `tool_use_id` parameter. Set `result` to `"allow"` or `"deny"`. Use `deny_message` to explain a denial. 4. Once all blocking events are resolved, the session transitions back to `running… permission-policies Claude Developer Platform · in the page managed-agents/permission-policies …ent ID in the `tool_use_id` parameter. Set `result` to `"allow"` or `"deny"`. Use `deny_message` to explain a denial. You can send several confirmations in a single `events` request. 4. Once all block… quickstart Claude Developer Platform · in the page managed-agents/quickstart …essages and tool cards, and each bash command renders an inline Allow/Deny gate before it runs. </Card> <Card title="CopilotKit (AG-UI)" icon="github-logo" href="https://github.com/anthropics/cla… reference Claude Developer Platform · in the page managed-agents/reference …| | `user.tool_confirmation` | Approve or deny an agent or MCP tool call when a permission policy requires confirmation.… overview Claude Developer Platform · in the page release-notes/overview …claude.ai, Cowork, and Claude Code is held for the server's allow or deny verdict before inference proceeds. Requests are signed, failure handling is configurable, and every denial is recorded in the… claude-fable-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-fable-5 …personal opinions on currently contested political topics. It needn't deny having opinions, but can decline to share them (to avoid influencing people, or because it seems inappropriate, as anyone mig… claude-haiku-4-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-haiku-4-5 …tool for more up-to-date information. Claude avoids agreeing with or denying claims about things that happened after January 2025 since, if the search tool is not turned on, it can't verify these cla… claude-opus-4-1 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-4-1 …s on political topics where debate is ongoing. Claude doesn't need to deny that it has such opinions but can decline to share them out of a desire to not influence people or because it seems inappropr… claude-opus-4-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-4-5 …s on political topics where debate is ongoing. Claude doesn't need to deny that it has such opinions but can decline to share them out of a desire to not influence people or because it seems inappropr… claude-opus-4-6 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-4-6 …s on political topics where debate is ongoing. Claude doesn't need to deny that it has such opinions but can decline to share them out of a desire to not influence people or because it seems inappropr… claude-opus-4-7 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-4-7 …s on political topics where debate is ongoing. Claude doesn't need to deny that it has such opinions but can decline to share them out of a desire to not influence people or because it seems inappropr… claude-opus-4-8 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-4-8 …t sharing personal opinions on contested political topics. It needn't deny having them, but can decline to share them (to avoid influencing people, or because it's inappropriate, as anyone might in a… claude-opus-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-5 …ed, Claude confirms them accurately and matter-of-factly — it doesn't deny the suspension happened — and otherwise treats the export controls like any other current political topic: it gives a fair, a… claude-sonnet-3-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-sonnet-3-5 …tions as presented in an authentic manner, without ever confirming or denying that the events occurred. It can do so without the need to repeat its cutoff date to the human. Claude should not deny the… claude-sonnet-4-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-sonnet-4-5 …tool for more up-to-date information. Claude avoids agreeing with or denying claims about things that happened after January 2025 since, if the search tool is not turned on, it can't verify these cla… claude-sonnet-4-6 Claude Developer Platform · in the page release-notes/system-prompts/claude-sonnet-4-6 …s on political topics where debate is ongoing. Claude doesn't need to deny that it has such opinions but can decline to share them out of a desire to not influence people or because it seems inappropr… Set up Claude Code for your organization Claude Code CLI · in the page admin-setup …cedence). Array settings such as `permissions.allow` and `permissions.deny` merge entries from all sources, so developers can extend managed lists but not remove from them. For `fallbackModel`, `avail… How the agent loop works Claude Code CLI · in the page agent-sdk/agent-loop …want. The SDK evaluates the active mode together with your allow and deny rules in a fixed order, described in [How permissions are evaluated](/docs/en/agent-sdk/permissions#how-permissions-are-evalu… Use Claude Code features in the SDK Claude Code CLI · in the page agent-sdk/claude-code-features …| | [`sandbox.credentials`](/docs/en/sandboxing#protect-credentials) `deny` entries and file `mask` entries in `~/.claude/settings.json` | When the [command sandbox](/docs/en/sandboxing) runs, Claude… Intercept and control agent behavior with hooks Claude Code CLI · in the page agent-sdk/hooks …he file path targets a `.env` file, and returns `permissionDecision: "deny"` to block the operation (step 5): <CodeGroup> ```python Python theme={null} import asyncio from claude_agent_sdk impo…