15 pages for permissions.deny.

Set up Claude Code for your organization Claude Code CLI · in the page admin-setup …settings-precedence). Array settings such as `permissions.allow` and `permissions.deny` merge entries from all sources, so developers can extend managed lists but not remove from them. For `fallbackMo… Share session output as artifacts Claude Code CLI · in the page artifacts …| | [Permission rule](/docs/en/permissions) | Add `Artifact` to `permissions.deny` | Once you tur… Configure auto mode Claude Code CLI · in the page auto-mode-config …| | Never run the action | `permissions.deny` | Blocks before the classifier is consulted. Neither the classifier nor… Claude apps gateway configuration Claude Code CLI · in the page claude-apps-gateway-config …'s list fully replaces the base's. * **Deny-lists and hook arrays**: `permissions.deny`, `permissions.ask`, `disabledMcpjsonServers`, `deniedMcpServers`, `blockedMarketplaces`, and every `hooks` event… Set up Claude Code in a monorepo or large codebase Claude Code CLI · in the page large-codebases …[`Read` deny rules](#block-reads-of-generated-and-vendored-code) in `permissions.deny` | | Find a symbol's definition or callers through the language server instead of scanning files | A… Deploy managed settings Claude Code CLI · in the page managed-settings …the later file's value replaces the earlier one * **Lists**, such as `permissions.deny` or `sandbox.network.allowedDomains`: the two lists combine, with duplicates removed * **Nested blocks**, such as… How Claude remembers your project Claude Code CLI · in the page memory …| Block specific tools, commands, or file paths | Managed settings: `permissions.deny` | | Enforce sandbox isolation | Managed settings: `sandbox.enabled`… Monitoring Claude Code CLI · in the page monitoring-usage …ith each entry redacted by the same rules * A `permissions.allow`, `permissions.deny`, or `permissions.ask` rule is exported as its tool name with the content redacted, such as `Read([REDACTED])`, w… Choose a permission mode Claude Code CLI · in the page permission-modes …terms. The push's content is still checked against the other rules, [`permissions.deny` rules](/docs/en/permissions#manage-permissions) can still block push commands [as written](/docs/en/permissions#… Security Claude Code CLI · in the page security …like `Bash(curl *)`. To stop Claude from running them, add them to [`permissions.deny`](/docs/en/permissions#tool-specific-permission-rules). A deny rule matches the command [as written](/docs/en/per… Example settings files Claude Code CLI · in the page settings-example …nd `enforceAvailableModels` restrict which models sessions can use * `permissions.deny` denies two file reads and `curl` commands [as Claude writes them](/docs/en/permissions#bash-rule-limits), and `d… All settings Claude Code CLI · in the page settings-reference …| Permission settings | Any file | | [`permissions.deny`](#permissions-deny) | Block listed [tool uses](/do… Create custom subagents Claude Code CLI · in the page sub-agents …s. To restrict them: * To block a specific built-in type, add it to `permissions.deny` as shown in [Disable specific subagents](#disable-specific-subagents). * To prevent Claude from delegating to an… Tools reference Claude Code CLI · in the page tools-reference …missions.allow`](/docs/en/settings-reference#permissions-allow) and [`permissions.deny`](/docs/en/settings-reference#permissions-deny) in settings, and the `/permissions` interface * in the `--allowed… Code in Claude Desktop on 3P Claude Documentation · in the page third-party/claude-desktop/code …connect. Per-tool `toolPolicy` values on each server are emitted as `permissions.deny` (for `blocked`) or `permissions.ask` (for `ask`) rules against the corresponding `mcp__<server>__<tool>` names.…