18 pages for permissions.deny.

Set up Claude Code for your organization Claude Code CLI · in the page admin-setup …settings-precedence). Array settings such as `permissions.allow` and `permissions.deny` merge entries from all sources, so developers can extend managed lists but not remove from them. For `fallbackMo… Share session output as artifacts Claude Code CLI · in the page artifacts …(https://code.claude.com/docs/en/permissions.md) | Add `Artifact` to `permissions.deny` | Once you turn artifacts off in a [`--settings`](https://code.claude.com/docs/en/cli-reference#cli-flags) file… Configure auto mode Claude Code CLI · in the page auto-mode-config …er cannot auto-approve a matching action. | | Never run the action | `permissions.deny` | Blocks before the classifier is consulted. Neither the classifier nor user intent can override it. | | One-off… Claude Code changelog Claude Code CLI · in the page changelog …tool call instead of moving it to the background right away * Added `permissions.denyInsteadOfPrompting` setting: a tool call that would wait on a permission prompt is denied and the turn continues,… Claude apps gateway configuration Claude Code CLI · in the page claude-apps-gateway-config …ists and hook arrays**: these take the union of base and policy: * `permissions.deny` and `permissions.ask` * `disabledMcpjsonServers` and `deniedMcpServers` * `blockedMarketplaces` and `deniedM… Use Claude Code in the cloud Claude Code CLI · in the page claude-code-on-the-web …repository's `.claude/settings.json`, listing both tool names under `permissions.deny`: ```json theme={null} { "permissions": { "deny": ["SearchPlugins", "SuggestPluginInstall"] } } ``` Cla… Set up Claude Code in a monorepo or large codebase Claude Code CLI · in the page large-codebases …[`Read` deny rules](#block-reads-of-generated-and-vendored-code) in `permissions.deny` | | Find a symbol's definition or callers through the language server instead of scanning files | A [code intell… Deploy managed settings Claude Code CLI · in the page managed-settings …the later file's value replaces the earlier one * **Lists**, such as `permissions.deny` or `sandbox.network.allowedDomains`: the two lists combine, with duplicates removed * **Nested blocks**, such as… How Claude remembers your project Claude Code CLI · in the page memory …ttings](https://code.claude.com/docs/en/managed-settings.md) such as `permissions.deny`. **1. Create the file at the managed policy location** * macOS: `/Library/Application Support/ClaudeCode/CLAUD… Monitoring Claude Code CLI · in the page monitoring-usage …ith each entry redacted by the same rules * A `permissions.allow`, `permissions.deny`, or `permissions.ask` rule is exported as its tool name with the content redacted, such as `Read([REDACTED])`, w… Choose a permission mode Claude Code CLI · in the page permission-modes …content is still checked against the classifier's other rules, and [`permissions.deny` rules](https://code.claude.com/docs/en/permissions#manage-permissions) can still block push commands [as written… Security Claude Code CLI · in the page security …like `Bash(curl *)`. To stop Claude from running them, add them to [`permissions.deny`](https://code.claude.com/docs/en/permissions#tool-specific-permission-rules). A deny rule matches the command [a… Example settings files Claude Code CLI · in the page settings-example …nd `enforceAvailableModels` restrict which models sessions can use * `permissions.deny` denies two file reads and `curl` commands [as Claude writes them](https://code.claude.com/docs/en/permissions.md… All settings Claude Code CLI · in the page settings-reference …on-starts-in) for new sessions | Permission settings | Any file | | [`permissions.deny`](#permissions-deny) | Block listed [tool uses](https://code.claude.com/docs/en/permissions.md#permission-rule-sy… Create custom subagents Claude Code CLI · in the page sub-agents …s. To restrict them: * To block a specific built-in type, add it to `permissions.deny` as shown in [Disable specific subagents](#disable-specific-subagents). * To prevent Claude from delegating to an… Tools reference Claude Code CLI · in the page tools-reference …//code.claude.com/docs/en/settings-reference#permissions-allow) and [`permissions.deny`](https://code.claude.com/docs/en/settings-reference#permissions-deny) in settings, and the `/permissions` interf… Set up Cowork (local mode) for a HIPAA-ready organization Claude Documentation · in the page cowork/hipaa-setup …n the [Claude Desktop policy](#deploy-the-claude-desktop-policy) | | `permissions.deny` | A rule that denies `Bash` with no pattern also stops Claude from running shell commands in Cowork | | `allowMa… Code in Claude Desktop on 3P Claude Documentation · in the page third-party/claude-desktop/code …ssions-for-managed-mcp-servers) values on each server are emitted as `permissions.deny` (for `blocked`) or `permissions.ask` (for `ask`) rules against the corresponding `mcp__<server>__<tool>` names.…