20 pages for permissions.allow.

Set up Claude Code for your organization Claude Code CLI · in the page admin-setup …d#exceptions-to-managed-settings-precedence). Array settings such as `permissions.allow` and `permissions.deny` merge entries from all sources, so developers can extend managed lists but not remove fr… Connect to external tools with MCP Claude Code CLI · in the page agent-sdk/mcp …` or `mcp__github__*`, in [`allowedTools`](#allow-mcp-tools) or in a `permissions.allow` rule in the `settings` option. An [`mcp_tool` hook](https://code.claude.com/docs/en/hooks#mcp-tool-hook-fields)… Orchestrate teams of Claude Code sessions Claude Code CLI · in the page agent-teams …d there. To approve those actions ahead of time, put the rules under `permissions.allow` in [`--settings`](https://code.claude.com/docs/en/settings#change-a-setting-for-one-session) when you start the… Configure auto mode Claude Code CLI · in the page auto-mode-config …d`, `README.md`, config files, and git remotes * Your `autoMode` and `permissions.allow` settings * The hosts, buckets, and command names from the commands Claude ran in your recent sessions in this p… Claude apps gateway configuration Claude Code CLI · in the page claude-apps-gateway-config …es depend on the key type: * **Allow-lists**: `availableModels` and `permissions.allow`. A specific policy's list fully replaces the base's. * **Deny-lists and hook arrays**: `permissions.deny`, `per… Explore the .claude directory Claude Code CLI · in the page claude-directory …ny command starting with <C>npm test</C></>, <>Array settings like <C>permissions.allow</C> combine across all scopes; scalar settings like <C>model</C> use the most specific value</>], exam… Error reference Claude Code CLI · in the page errors …nfiguration warnings](#skill-or-command-name-refused) | | `Ignoring N permissions.allow entries from ... this workspace has not been trusted` | [Configuration warnings](#workspace-has-not-been-trusted… Claude Code GitHub Actions Claude Code CLI · in the page github-actions …tools the prompt needs, with `--allowedTools` in `claude_args` or a [`permissions.allow` rule](https://code.claude.com/docs/en/permissions#permission-rule-syntax) in the `settings` input. If you invok… Run Claude Code programmatically Claude Code CLI · in the page headless …-only-commands). Actions covered by your `--allowedTools` entries or `permissions.allow` rules also run. `AskUserQuestion`, connector tools [your organization set to `ask`](https://code.claude.com/doc… Deploy managed settings Claude Code CLI · in the page managed-settings …r `"merge"`, Claude Code adds a lower source's list entries, such as `permissions.allow` rules and hooks, to the policy, so turn it on only when every source ranked below your highest one is under an… Monitoring Claude Code CLI · in the page monitoring-usage …t keeps its length, with each entry redacted by the same rules * A `permissions.allow`, `permissions.deny`, or `permissions.ask` rule is exported as its tool name with the content redacted, such as… Choose a permission mode Claude Code CLI · in the page permission-modes …om/docs/en/permissions.md#read-only-commands). Actions matching your `permissions.allow` rules and calls approved by a [PreToolUse hook](https://code.claude.com/docs/en/permissions.md#extend-permissio… Configure permissions Claude Code CLI · in the page permissions …o approval still run, as do tools pre-approved via `/permissions` or `permissions.allow` rules. `AskUserQuestion`, MCP tools marked [`requiresUserInteraction`](https://code.claude.com/docs/en/mcp#requ… Customize sessions in self-hosted environments Claude Code CLI · in the page self-hosted-environments-configuration …it"`, `"Write"`, or `"NotebookEdit"` entry in a repository-committed `permissions.allow`. A bare file-tool rule matches the tool regardless of path, granting writes anywhere on the host rather than on… Deploy self-hosted environments to production Claude Code CLI · in the page self-hosted-environments-deploy …nalDirectories` entry, an `Edit`, `Write`, or `NotebookEdit` rule in `permissions.allow`, or a `sandbox.filesystem.allowWrite` or `allowRead` entry * A non-empty `env` block * An operator-posture… Self-hosted environments reference Claude Code CLI · in the page self-hosted-environments-reference …ersisted trust for each session's repository paths so repo-committed `permissions.allow` and `additionalDirectories` are honored. Set `false` to drop repo-committed permission grants and configure all… All settings Claude Code CLI · in the page settings-reference …ssions.md#working-directories) | Permission settings | Any file | | [`permissions.allow`](#permissions-allow) | Approve listed [tool uses](https://code.claude.com/docs/en/permissions.md#permission-rul… Create custom subagents Claude Code CLI · in the page sub-agents …`.claude/agents/` or `~/.claude/agents/`. You can also add rules to [`permissions.allow`](https://code.claude.com/docs/en/settings-reference#permissions-allow) in `settings.json` or `settings.local.js… Tools reference Claude Code CLI · in the page tools-reference …s directly when defining permissions and other configuration: * in [`permissions.allow`](https://code.claude.com/docs/en/settings-reference#permissions-allow) and [`permissions.deny`](https://code.cl… Code in Claude Desktop on 3P Claude Documentation · in the page third-party/claude-desktop/code …llow"`, and can block them. To run a tool without that review, add a `permissions.allow` rule for it to your Claude Code managed settings, beside any `autoMode` block: ```json managed-settings.json t…