HomeDocs changes
Documentation changes
What the docs quietly changed.
Anthropic's published documentation, fetched on a schedule and diffed against the last copy. Every edit dated, including the ones that never made a release note.
Last poll read all 4 cleanly: Claude Code CLI, Claude Developer Platform, Claude Documentation, Model Context Protocol. A date here is when this site noticed, not when Anthropic edited.
Claude Developer Platform
808pages tracked
587 changed this week · last read 22 Oct 2026
Claude Code CLI
228pages tracked
146 changed this week · last read 22 Oct 2026
Claude Documentation
278pages tracked
74 changed this week · last read 22 Oct 2026
Model Context Protocol
357pages tracked
163 changed this week · last read 21 Oct 2026
100 on this page
5,287 of the ledger's changes in claude-code. Show every change
ReadSourcePageWhatLines
19 Oct 2026
61 pages
+15561 −15306 lines
claude-code
code-review-troubleshooting
±changed
+1−1
claude-codechanged
code-review-troubleshooting
* **You don't have write access**: you need write, maintain, or admin permission on the repository, and on a pull request from a fork the permission that counts is on the base repo
* **You don't have write access**: you need write, maintain, or admin permission on the repository. On a pull request from a fork, the permission that counts is on the base reposit
+1 −1 lines
Upstream edited 19 Oct 2026 19:47 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
code-review-setup
±changed
+1−1
claude-codechanged
code-review-setup
* **A bot, or someone without write access, comments `@claude review`**: that no review was started, and who can request one
* **A bot, or someone without write access who isn't the pull request's author, comments `@claude review`**: that no review was started, and who can request one
+1 −1 lines
Upstream edited 19 Oct 2026 19:47 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
claude-apps-gateway-config
±changed
+1−1
claude-codechanged
claude-apps-gateway-config
* The egress allowlist, from `sandbox.network.allowedDomains`. If you set `coworkEgressAllowedHosts` in the policy's `desktop` block, the gateway uses that value instead of the der
* The egress allowlist, from `sandbox.network.allowedDomains`. If you set `coworkEgressAllowedHosts` in the policy's `desktop` block, the gateway uses that value instead of the der
+1 −1 lines
Upstream edited 19 Oct 2026 19:46 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
security-guidance
±changed
+0−6
claude-codechanged
security-guidance
<span id="on-each-file-edit" />
<span id="at-the-end-of-each-turn" />
+0 −6 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
plugins/install
±changed
+115−129
claude-codechanged
plugins/install
<Note>
These cases are covered on other pages:
* **You use claude.ai chat or Cowork, not Claude Code**: see [Plugins on claude.ai and in Cowork](https://claude.com/docs/plugins/overview)
* **Claude Code printed an error**: find it in [Troubleshoot plugins](/docs/en/plugins/troubleshooting)
+115 −129 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
mcp
±changed
+320−350
claude-codechanged
mcp
<Warning>
Verify you trust each server before connecting it. Servers that fetch external content can expose you to [prompt injection risk](/docs/en/security#protect-against-prompt-injectio
</Warning>
> [!WARNING]
>
+320 −350 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
llm-gateway-connect
±changed
+192−214
claude-codechanged
llm-gateway-connect
<Note>
* To deploy a gateway for your organization, see [Roll out an LLM gateway](/docs/en/llm-gateway-rollout)
* For what Claude Code sends to a gateway, see the [gateway compatibility guide](/docs/en/llm-gateway-protocol)
</Note>
> [!NOTE]
+192 −214 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
desktop-wsl
±changed
+9−13
claude-codechanged
desktop-wsl
<Steps>
<Step title="Pick a distribution">
Start a new session in the Code tab and open the [environment selector](/docs/en/desktop#start-a-session) under the prompt box, or above it in the [earlier layout](/docs/en/des
</Step>
**1. Pick a distribution**
+9 −13 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
desktop-quickstart
±changed
+51−57
claude-codechanged
desktop-quickstart
<CardGroup cols={3}>
<Card title="Download for macOS" icon="apple" href="https://claude.ai/api/desktop/darwin/universal/dmg/latest/redirect?utm_source=claude_code&utm_medium=docs">
Universal build for Intel and Apple Silicon
</Card>
> **[Download for macOS](https://claude.ai/api/desktop/darwin/universal/dmg/latest/redirect?utm_source=claude_code\&utm_medium=docs)**
+51 −57 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
desktop-ios-simulator
±changed
+18−20
claude-codechanged
desktop-ios-simulator
<Note>
The iOS Simulator pane is in public beta in Claude Code Desktop on macOS. It's available on Pro, Max, Team, and Enterprise plans, except in Enterprise organizations that have a H
</Note>
> [!NOTE]
>
+18 −20 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
desktop
±changed
+351−407
claude-codechanged
desktop
<CardGroup cols={3}>
<Card title="Download for macOS" icon="apple" href="https://claude.ai/api/desktop/darwin/universal/dmg/latest/redirect?utm_source=claude_code&utm_medium=docs">
Universal build for Intel and Apple Silicon
</Card>
+351 −407 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
worktrees
±changed
+6−3
claude-codechanged
worktrees
Worktrees require a git repository; for other version control systems, [configure hooks to replace the git logic](#non-git-version-control). In the [desktop app](/docs/en/desktop
If you use another version control system or the desktop app, follow the instructions for your setup:
* **Other version control systems**: worktrees require a git repository; [configure hooks to replace the git logic](#non-git-version-control)
* **Desktop app**: see [Run a session in its own worktree](/docs/en/desktop#run-a-session-in-its-own-worktree)
+6 −3 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
settings-reference
±changed
+10−3
claude-codechanged
settings-reference
| [`sshConfigs`](#sshconfigs) | Add [SSH connections](/docs/en/desktop#pre-configure-ssh-connections-for-your-team) to the Desktop environment dropdown | Remote, desktop, and notif
| [`sshConfigs`](#sshconfigs) | Add [SSH connections](/docs/en/desktop#pre-configure-ssh-connections-for-your-team) to the Desktop environment selector | Remote, desktop, and notif
Turn off Code sessions that run on the device in the [desktop app](/docs/en/desktop#local-sessions-on-managed-devices), for deployments where developers should work on remote machi
Turn off Code sessions that run on the device in the [desktop app](/docs/en/desktop#local-sessions-on-managed-devices), for deployments where developers should work on remote machi
+10 −3 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
security-guidance
±changed
+1−1
claude-codechanged
security-guidance
* **Claude desktop app, local or SSH session**: open the [plugin browser](/docs/en/desktop#install-plugins) by clicking the **+** button next to the prompt, then **Plugins**, then
* **Claude desktop app, local or SSH session**: use the **Desktop app** tab under [Install a plugin](/docs/en/plugins/install#install-a-plugin)
+1 −1 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
plugins/troubleshooting
±changed
+1−1
claude-codechanged
plugins/troubleshooting
* **Claude desktop app, local or SSH session**: click the **+** button next to the prompt, then **Plugins**, then **Add plugin** to open the [plugin browser](/docs/en/desktop#insta
* **Claude desktop app, local or SSH session**: use the **Desktop app** tab under [Install a plugin](/docs/en/plugins/install#install-a-plugin)
+1 −1 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
plugins/install
±changed
+2−2
claude-codechanged
plugins/install
Click the **+** button next to the prompt box and select **Plugins**, then **Add plugin**. The plugin browser opens with the plugins from your marketplaces.
Click the **+** button next to the prompt box and select **Add plugins**. If the **+** menu shows **Plugins** instead of **Add plugins**, select **Plugins**, then **Browse
To enable, disable, or uninstall later, use **+ > Plugins > Manage plugins**. The plugin browser isn't available in the desktop app's cloud sessions. See [Install plugins in th
To enable, disable, or uninstall a plugin later, see [Install plugins in the desktop app](/docs/en/desktop#install-plugins).
+2 −2 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
permission-modes
±changed
+1−1
claude-codechanged
permission-modes
**During a session**: in the Code tab, use the mode selector next to the send button. Not every mode appears in the selector:
**During a session**: in the Code tab, use the mode selector in the row under the prompt box. Not every mode appears in the selector:
+1 −1 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
mcp
±changed
+1−1
claude-codechanged
mcp
Which settings govern a claude.ai connector depends on where your session runs, because only some sessions fetch connectors from claude.ai themselves. Each row below names how conn
Which settings govern a claude.ai connector depends on where your session runs, because only some sessions fetch connectors from claude.ai themselves. Each row below names how conn
+1 −1 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
llm-gateway-connect
±changed
+1−1
claude-codechanged
llm-gateway-connect
With the gateway configuration active, the environment picker doesn't offer Anthropic-hosted cloud environments, and [Remote Control](/docs/en/remote-control) is unavailable.
With the gateway configuration active, the environment selector doesn't offer Anthropic-hosted cloud environments, and [Remote Control](/docs/en/remote-control) is unavailable.
+1 −1 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
desktop-wsl
±changed
+16−4
claude-codechanged
desktop-wsl
Start a new session in the Code tab and open the environment picker. Your installed WSL 2 distributions appear in a **WSL** section. Pick one.
Start a new session in the Code tab and open the [environment selector](/docs/en/desktop#start-a-session) under the prompt box, or above it in the [earlier layout](/docs/en/des
Folders you've used recently appear in the picker per distribution, so reconnecting to a project is one click.
A few features aren't available in WSL sessions yet: the integrated terminal, connectors and plugins, session forking, the file browser pane, and file suggestions when you type `@`
+16 −4 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
desktop-scheduled-tasks
±changed
+1−1
claude-codechanged
desktop-scheduled-tasks
By default, scheduled tasks run against whatever state your working directory is in, including uncommitted changes. Enable the worktree toggle when creating the task to give each
By default, scheduled tasks run against whatever state your working directory is in, including uncommitted changes. Enable the worktree toggle when creating the task to give each
+1 −1 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
desktop-quickstart
±changed
+11−9
claude-codechanged
desktop-quickstart
Select **Local** to run Claude on your machine using your files directly. Click **Select folder** and choose your project directory.
In the [row under the prompt box](/docs/en/desktop#start-a-session), click the first control, the environment selector, and select the top entry in the **Local** group. Then cl
If no environment selector appears under your prompt box, you have the earlier layout. See [Check which layout you have](/docs/en/desktop#check-which-layout-you-have).
* **SSH**: Connect to a remote machine over SSH, such as your own servers, cloud VMs, or dev containers. Desktop installs Claude Code on the remote machine automatically the fi
+11 −9 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
desktop-ios-simulator
±changed
+2−2
claude-codechanged
desktop-ios-simulator
* The simulator pane requires Claude Desktop v1.24012.0 or later. Open **Claude → Check for Updates**, then restart the app.
* The simulator pane requires Claude Desktop v1.24012.0 or later. Open **Claude > Check for Updates…**, then restart the app.
* [Work in parallel with sessions](/docs/en/desktop#work-in-parallel-with-sessions): how sessions isolate changes
* [Run a session in its own worktree](/docs/en/desktop#run-a-session-in-its-own-worktree): how sessions isolate changes
+2 −2 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
desktop
±changed
+305−85
claude-codechanged
desktop
Before you send your first message, configure four things in the prompt area:
* **Environment**: choose where Claude runs. Select **Local** for your machine, **Cloud** for a [cloud session](#cloud-sessions) that continues after you close the app, an [**SSH c
* **Project folder**: select the folder or repository Claude works in. For cloud sessions, you can add [multiple repositories](#run-long-running-tasks-in-the-cloud).
* **Model**: pick a [model](/docs/en/model-config#available-models) from the dropdown next to the send button. You can change this during the session.
+305 −85 lines
Upstream edited 19 Oct 2026 19:44 UTC Recorded here 19 Oct 2026 20:07 UTC
claude-code
claude-tag
±changed
+4−4
claude-codechanged
claude-tag
No line of the body moved in this read.
+4 −4 lines
Recorded here 19 Oct 2026 18:37 UTC
claude-code
workflows
±changed
+32−34
claude-codechanged
workflows
<Note>
Dynamic workflows are available on all paid plans, with Anthropic API access, and on Amazon Bedrock, Google Cloud's Agent Platform, and Microsoft Foundry. On Pro, turn them on fr
</Note>
> [!NOTE]
>
+32 −34 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
terminal-config
±changed
+158−164
claude-codechanged
terminal-config
<Tabs>
<Tab title="Apple Terminal">
Open Settings → Profiles → Keyboard and check "Use Option as Meta Key".
If you accepted Claude Code's first-run terminal setup prompt, this is already done. That prompt runs `/terminal-setup` for you, which enables Option as Meta and turns off the
+158 −164 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
statusline
±changed
+794−826
claude-codechanged
statusline
<Frame>
<img src="https://mintcdn.com/claude-code/HDAmBwgbrZVk0pOt/images/statusline-multiline.png?fit=max&auto=format&n=HDAmBwgbrZVk0pOt&q=85&s=a9d0a2fe8e446d80b1abc46da3f93270" alt="A
</Frame>
 with a description of what you want configures all of this for you automatically.</Note>
+794 −826 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
server-managed-settings
±changed
+58−60
claude-codechanged
server-managed-settings
<Note>
Server-managed settings are available for [Claude for Teams](https://claude.com/pricing?utm_source=claude_code\&utm_medium=docs\&utm_content=server_settings_teams#team-&-enterpri
</Note>
> [!NOTE]
>
+58 −60 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
memory
±changed
+35−39
claude-codechanged
memory
| **Managed policy** | • macOS: `/Library/Application Support/ClaudeCode/CLAUDE.md`<br />• Linux and WSL: `/etc/claude-code/CLAUDE.md`<br />• Windows: `C:\Program Files\ClaudeCode\
| **Managed policy** | • macOS: `/Library/Application Support/ClaudeCode/CLAUDE.md` • Linux and WSL: `/etc/claude-code/CLAUDE.md` • Windows: `C:\Program Files\ClaudeCode\CLAUDE.md`
<Tip>
Run `/init` to generate a starting CLAUDE.md automatically. Claude analyzes your codebase and creates a file with build commands, test instructions, and project conventions it di
+35 −39 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
fast-mode
±changed
+14−14
claude-codechanged
fast-mode
<Note>
Fast mode is in [research preview](#research-preview). The feature, pricing, and availability may change based on feedback.
</Note>
> [!NOTE]
>
+14 −14 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
auto-mode-config
±changed
+23−31
claude-codechanged
auto-mode-config
<Note>
This page is the configuration reference. Turning auto mode on and off is covered on the Permission modes page:
* **Switch to auto mode mid-session, or back out of it**: see [Switch permission modes](/docs/en/permission-modes#switch-permission-modes)
* **Start a session in auto mode**: see [Start in a different permission mode](/docs/en/permission-modes#start-in-a-different-mode)
+23 −31 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
amazon-bedrock
±changed
+27−94
claude-codechanged
amazon-bedrock
export const ContactSalesCard = ({surface}) => {
const utm = content => `utm_source=claude_code&utm_medium=docs&utm_content=${surface}_${content}`;
const iconArrowRight = (size = 13) => <svg width={size} height={size} viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2.5" strokeLinecap="round" strokeLinejoin
<line x1="5" y1="12" x2="19" y2="12" />
<polyline points="12 5 19 12 12 19" />
+27 −94 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
workflows
±changed
+0−4
claude-codechanged
workflows
<Note>
Before v2.1.210, the keyword started a workflow from any of these routes too, including a webhook payload or pull request comment relayed into the conversation.
</Note>
+0 −4 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
tools-reference
±changed
+10−15
claude-codechanged
tools-reference
| `EndConversation` | Ends the session, in rare cases of sustained abusive input or when you ask Claude to demonstrate the tool. Requires Claude Code v2.1.213 or later. See [EndCon
| `EndConversation` | Ends the session, in rare cases of sustained abusive input or when you ask Claude to demonstrate the tool. See [EndConversation tool behavior](#endconversatio
An `Edit(...)` allow rule also grants read access to the same path, so you don't need a matching `Read(...)` rule. A `Read(...)` deny rule also blocks the Edit and Write tools on t
An `Edit(...)` allow rule also grants read access to the same path, so you don't need a matching `Read(...)` rule. A `Read(...)` deny rule also blocks the Edit and Write tools on t
These checks must pass for an edit to apply. Before any of them, a path matched by a [`Read` deny rule](/docs/en/permissions#tool-specific-permission-rules) is refused, including c
+10 −15 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
terminal-config
±changed
+1−1
claude-codechanged
terminal-config
In [screen reader mode](/docs/en/accessibility), `/terminal-setup` leaves the bell setting unchanged so the terminal bell stays audible. Before v2.1.211, `/terminal-setup` turn
In [screen reader mode](/docs/en/accessibility), `/terminal-setup` leaves the bell setting unchanged so the terminal bell stays audible. If an earlier run turned the bell off,
+1 −1 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
sub-agents
±changed
+6−10
claude-codechanged
sub-agents
This working-directory check covers the whole repository containing the directory you launched Claude Code from. When your session runs in a linked [worktree](/docs/en/worktrees) o
This working-directory check covers the whole repository containing the directory you launched Claude Code from. When your session runs in a linked [worktree](/docs/en/worktrees) o
A per-invocation `model` parameter also applies when the subagent is [resumed or sent a follow-up message](#resume-subagents), so the subagent stays on that model. Before v2.1.211,
A per-invocation `model` parameter also applies when the subagent is [resumed or sent a follow-up message](#resume-subagents), so the subagent stays on that model.
When nothing in the `tools` list resolves to a tool, for example because every entry is misspelled or names a tool that isn't available to subagents, Claude Code usually refuses to
+6 −10 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
statusline
±changed
+2−2
claude-codechanged
statusline
| `cost.total_cost_usd` | Estimated session cost in USD, computed client-side at list price unless a [`modelPricing`](/docs/en/settings-reference#modelpricing) table is in effect.
| `cost.total_cost_usd` | Estimated session cost in USD, computed client-side at list price unless a [`modelPricing`](/docs/en/settings-reference#modelpricing) table is in effect.
| `effort` | string or number, optional | Reasoning effort set for the subagent in its [definition frontmatter](/docs/en/sub-agents#supported-frontmatter-fields) or on the individu
| `effort` | string or number, optional | Reasoning effort set for the subagent in its [definition frontmatter](/docs/en/sub-agents#supported-frontmatter-fields) or on the individu
+2 −2 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
settings-reference
±changed
+2−2
claude-codechanged
settings-reference
Map two-key INSERT-mode sequences to Escape in [vim editor mode](/docs/en/interactive-mode#vim-editor-mode). Each key is exactly two printable characters typed in sequence, and `"<
Map two-key INSERT-mode sequences to Escape in [vim editor mode](/docs/en/interactive-mode#vim-editor-mode). Each key is exactly two printable characters typed in sequence, and `"<
Has no effect unless `editorMode` is `"vim"`. See [Remap INSERT-mode key sequences](/docs/en/interactive-mode#remap-insert-mode-key-sequences). Requires Claude Code v2.1.208 or lat
Has no effect unless `editorMode` is `"vim"`. See [Remap INSERT-mode key sequences](/docs/en/interactive-mode#remap-insert-mode-key-sequences).
+2 −2 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
sessions
±changed
+1−1
claude-codechanged
sessions
* Default display name: interactive sessions you never name still get a default display name when they start. Requires Claude Code v2.1.196 or later. The default combines the worki
* Default display name: interactive sessions you never name still get a default display name when they start. The default combines the working directory's name with a two-character
+1 −1 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
server-managed-settings
±changed
+2−2
claude-codechanged
server-managed-settings
Claude Code withholds several categories of variables in the cached `env` block until the server confirms the payload for the session. This keeps a cached proxy, certificate author
Claude Code withholds several categories of variables in the cached `env` block until the server confirms the payload for the session. This keeps a cached proxy, certificate author
* **An interactive session that can't show the dialog**: Claude Code doesn't apply the delivered settings and keeps the last-approved settings. The dialog appears in the next sessi
* **An interactive session that can't show the dialog**: Claude Code doesn't apply the delivered settings and keeps the last-approved settings. The dialog appears in the next sessi
+2 −2 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
permissions
±changed
+4−4
claude-codechanged
permissions
A `Read` deny rule also blocks the [Edit and Write tools](/docs/en/errors#file-is-covered-by-a-read-deny-rule) on the same path, including creating a new file there. NotebookEdit i
Claude Code checks file permissions against `Edit(path)` and `Read(path)` rules only. If you write a path rule for `Write`, `NotebookEdit`, `Glob`, or the legacy `MultiEdit` tool i
A `Read` deny rule also blocks the [Edit and Write tools](/docs/en/errors#file-is-covered-by-a-read-deny-rule) on the same path, including creating a new file there. NotebookEdit i
+4 −4 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
permission-modes
±changed
+1−1
claude-codechanged
permission-modes
* Committing or pushing a change that would send secrets or sensitive data outside the repository when it runs, or widen what a deploy exposes. This covers a CI workflow or deploy
* Committing or pushing a change that would send secrets or sensitive data outside the repository when it runs, or widen what a deploy exposes. This covers a CI workflow or deploy
+1 −1 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
monitoring-usage
±changed
+19−19
claude-codechanged
monitoring-usage
| `CLAUDE_CODE_OTEL_CONTENT_MAX_LENGTH` | Content limit: the maximum length of content-bearing attributes such as model responses, tool content, system prompts, and raw API bodies,
| `CLAUDE_CODE_OTEL_CONTENT_MAX_LENGTH` | Content limit: the maximum length of content-bearing attributes such as model responses, tool content, system prompts, and raw API bodies,
For the `http/protobuf` and `http/json` protocols, Claude Code sends each export request with a `Content-Length` header. Before v2.1.212, Claude Code versions from v2.1.191 onward
For the `http/protobuf` and `http/json` protocols, Claude Code sends each export request with a `Content-Length` header.
A record emitted while an interaction is active carries the interaction span's IDs, even when Claude Code emits it outside the span's async context, such as in a permission prompt
+19 −19 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
memory
±changed
+2−2
claude-codechanged
memory
You can also run [`/import`](/docs/en/commands) to bring a supported coding agent's configuration into Claude Code, which appends a one-time copy of instruction files such as `AGEN
You can also run [`/import`](/docs/en/commands) to bring a supported coding agent's configuration into Claude Code, which appends a one-time copy of instruction files such as `AGEN
When Claude writes a memory file that begins with YAML frontmatter, Claude Code records the write time in a `modified` frontmatter field as an ISO 8601 timestamp. The timestamp sho
When Claude writes a memory file that begins with YAML frontmatter, Claude Code records the write time in a `modified` frontmatter field as an ISO 8601 timestamp. The timestamp sho
+2 −2 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
mcp
±changed
+4−4
claude-codechanged
mcp
A remote server whose configuration has an empty `url` shows as `not configured` in `/mcp`, in `claude mcp list`, and in the [`/plugin`](/docs/en/plugins/install) manager, and Clau
A remote server whose configuration has an empty `url` shows as `not configured` in `/mcp`, in `claude mcp list`, and in the [`/plugin`](/docs/en/plugins/install) manager, and Clau
If a refresh request fails, Claude Code keeps the server's previously discovered tools, prompts, and resources until a later refresh succeeds. Before v2.1.214, a transient error du
If a refresh request fails, Claude Code keeps the server's previously discovered tools, prompts, and resources until a later refresh succeeds.
An MCP tool call in the main conversation that is still running after two minutes moves to a background task instead of blocking the session. Claude receives the task ID immediatel
+4 −4 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
interactive-mode
±changed
+4−4
claude-codechanged
interactive-mode
The [`vimInsertModeRemaps`](/docs/en/settings-reference#viminsertmoderemaps) setting maps a two-key INSERT-mode sequence to Escape, so a mapping like `jj` returns you to NORMAL mod
The [`vimInsertModeRemaps`](/docs/en/settings-reference#viminsertmoderemaps) setting maps a two-key INSERT-mode sequence to Escape, so a mapping like `jj` returns you to NORMAL mod
| `s` | Substitute character: delete the character under the cursor and enter INSERT mode. Requires Claude Code v2.1.211 or later |
| `S` | Substitute line: clear the line and enter INSERT mode. Requires Claude Code v2.1.211 or later |
| `s` | Substitute character: delete the character under the cursor and enter INSERT mode |
+4 −4 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
hooks-guide
±changed
+1−1
claude-codechanged
hooks-guide
* `PreToolUse`: the tool call is denied; by default the turn ends and the deny `reason` appears in the chat as a warning line. Set `continueOnBlock: true` on the hook to instead
* `PreToolUse`: the tool call is denied; by default the turn ends and the deny `reason` appears in the chat as a warning line. Set `continueOnBlock: true` on the hook to instead
+1 −1 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
hooks
±changed
+6−8
claude-codechanged
hooks
In an `if` condition for a file tool, a single-segment directory pattern like `"Edit(src/**)"` matches only the `src` directory in the working directory and the files under it. To
In an `if` condition for a file tool, a single-segment directory pattern like `"Edit(src/**)"` matches only the `src` directory in the working directory and the files under it. To
Before v2.1.214, forked sessions reported source `"resume"`.
An [Agent SDK callback hook](/docs/en/agent-sdk/hooks) on `UserPromptSubmit` that reaches its timeout blocks the prompt with a message naming the hook and the timeout, because a ca
+6 −8 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
headless
±changed
+2−3
claude-codechanged
headless
If Claude Code can't read stdin, for example because the process that started it disconnected its end, Claude Code prints a warning to stderr and continues with the prompt from the
If Claude Code can't read stdin, for example because the process that started it disconnected its end, Claude Code prints a warning to stderr and continues with the prompt from the
If your consumer reads the stream slowly, Claude Code waits for the queued output to drain before exiting, scaling the wait with how much is still queued, capped at 30 seconds. Bef
If your consumer reads the stream slowly, Claude Code waits for the queued output to drain before exiting, scaling the wait with how much is still queued, capped at 30 seconds.
* **`--forward-subagent-text` and `CLAUDE_CODE_FORWARD_SUBAGENT_TEXT`**: v2.1.211 or later
+2 −3 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
fullscreen
±changed
+1−1
claude-codechanged
fullscreen
* **Click an option in a multi-select menu** to toggle it, and click the submit button to confirm your choices. Clicking a free-text row, such as the `Other` row in a multiple-choi
* **Click an option in a multi-select menu** to toggle it, and click the submit button to confirm your choices. Clicking a free-text row, such as the `Other` row in a multiple-choi
+1 −1 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
fast-mode
±changed
+1−1
claude-codechanged
fast-mode
Opus 5.5 is the fast mode default in Claude Code v2.1.280 and later. Before v2.1.280, fast mode defaulted to Opus 5 from v2.1.219, to Opus 4.8 on v2.1.154 through v2.1.218, and to
Opus 5.5 is the fast mode default in Claude Code v2.1.280 and later. Before v2.1.280, fast mode defaulted to Opus 5 from v2.1.219, and to Opus 4.8 on v2.1.154 through v2.1.218.
+1 −1 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
chrome
±changed
+3−3
claude-codechanged
chrome
Claude Code starts normally when Chrome isn't running. Before v2.1.211, startup could hang when Chrome integration was enabled but Chrome wasn't running.
Claude Code starts normally when Chrome isn't running.
Claude can attach files from your machine to upload fields on a page. Claude Code reads the file and sends its contents to the browser, so uploads work in both local and remote ses
Claude can attach files from your machine to upload fields on a page. Claude Code reads the file and sends its contents to the browser, so uploads work in both local and remote ses
Claude saves the image to disk and reports the file path. Before v2.1.211, the screenshot tool's `save_to_disk` option didn't write a file.
+3 −3 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
auto-mode-config
±changed
+2−2
claude-codechanged
auto-mode-config
To read one rule's full wording without piping through `jq`, pass `--label` with the start of the rule's label, such as `claude auto-mode defaults --label 'Git Destructive'`. Match
To read one rule's full wording without piping through `jq`, pass `--label` with the start of the rule's label, such as `claude auto-mode defaults --label 'Git Destructive'`. Match
To discard your customizations and return to the built-in defaults, run the reset subcommand. It requires Claude Code v2.1.212 or later and removes the `autoMode` section from your
To discard your customizations and return to the built-in defaults, run the reset subcommand, which removes the `autoMode` section from your user settings file:
+2 −2 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
artifacts
±changed
+1−1
claude-codechanged
artifacts
Run `/artifacts` in Claude Code to list the artifacts you own and the ones shared with you. The current session's artifacts come first, under **This session**. Requires Claude Code
Run `/artifacts` in Claude Code to list the artifacts you own and the ones shared with you. The current session's artifacts come first, under **This session**.
+1 −1 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
amazon-bedrock
±changed
+1−1
claude-codechanged
amazon-bedrock
Claude Code requests role credentials from the IAM Identity Center region named by the profile's `sso_region`, which doesn't need to match the region you run Amazon Bedrock in. In
Claude Code requests role credentials from the IAM Identity Center region named by the profile's `sso_region`, which doesn't need to match the region you run Amazon Bedrock in.
+1 −1 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
agent-view
±changed
+1−1
claude-codechanged
agent-view
Copying the session requires Claude Code v2.1.212 or later; on v2.1.161 through v2.1.211, `/fork` starts a [forked subagent](/docs/en/sub-agents#fork-the-current-conversation) inst
When [agent view is turned off](#turn-off-agent-view), `/fork` starts a [forked subagent](/docs/en/sub-agents#fork-the-current-conversation) instead of copying the session.
+1 −1 lines
Upstream edited 19 Oct 2026 18:23 UTC Recorded here 19 Oct 2026 18:37 UTC
claude-code
claude-tag
±changed
+1−1
claude-codechanged
claude-tag
No line of the body moved in this read.
+1 −1 lines
Recorded here 19 Oct 2026 17:37 UTC
claude-code
corporate-launcher
±changed
+46−48
claude-codechanged
corporate-launcher
<Note>
`CLAUDE_CODE_PROCESS_WRAPPER` requires Claude Code v2.1.208 or later. Earlier versions ignore the variable and start every process unwrapped. The equivalent [`processWrapper` set
After deploying either form, use the [Verify step](#set-up-the-launcher) to confirm the running version applies it.
</Note>
+46 −48 lines
Upstream edited 19 Oct 2026 17:33 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
corporate-launcher
±changed
+24−4
claude-codechanged
corporate-launcher
* **Don't reorder, absorb, or prepend arguments.** The first argument is the Claude Code binary and everything after it is its argv.
* **Don't reorder, absorb, or add to Claude Code's arguments.** Remove the launcher's [own arguments](#pass-arguments-to-the-launcher), which come first, and pass the rest to `exec
* **Reach `exec` within about three seconds each time the launcher runs.** A cold background dispatch runs the launcher twice in series before the first byte of output, so do slow
* **Reach `exec` within about three seconds each time the launcher runs.** A background session can run the launcher three times in series before its first output. Do slow work suc
* **Don't write to the terminal before Claude Code starts.** Anything printed before the `exec` is reported as the crash cause if the session dies before initializing.
+24 −4 lines
Upstream edited 19 Oct 2026 17:33 UTC Recorded here 19 Oct 2026 17:37 UTC
claude-code
troubleshooting
±changed
+1−0
claude-codechanged
troubleshooting
| After you update Claude Code or the Agent SDK, tool calls are denied in `claude -p` or SDK runs that don't pass `--permission-mode`, `permissionMode`, or `permission_mode` | [Too
+1 −0 lines
Upstream edited 19 Oct 2026 17:22 UTC Recorded here 19 Oct 2026 17:37 UTC
claude-code
permission-modes
±changed
+102−7
claude-codechanged
permission-modes
| `claude -p` or the [Agent SDK](/docs/en/agent-sdk/permissions#permission-modes) | `default` in sessions that [fetch feature flags](/docs/en/env-vars#features-that-need-feature-fl
| `claude -p` or the [Agent SDK](/docs/en/agent-sdk/permissions#permission-modes) | `default` |
In your [first session after an install or upgrade](/docs/en/env-vars#first-session-after-an-install-or-upgrade), Claude Code can choose the starting permission mode before its fea
+102 −7 lines
Upstream edited 19 Oct 2026 17:22 UTC Recorded here 19 Oct 2026 17:37 UTC
claude-code
model-config
±changed
+2−1
claude-codechanged
model-config
* **`CLAUDE_CODE_AUTO_MODE_MODEL`**: Claude Code ignores the variable and picks the model for its [auto mode classifier requests](/docs/en/permission-modes#default-classifier-model
* **[Auto mode classifier](/docs/en/permission-modes#eliminate-prompts-with-auto-mode)**: the classifier's Claude Sonnet 5 default applies only when the allowlist permits Sonnet 5.
* **[Auto mode classifier](/docs/en/permission-modes#eliminate-prompts-with-auto-mode)**: when the allowlist excludes the [default classifier model](/docs/en/permission-modes#defau
+2 −1 lines
Upstream edited 19 Oct 2026 17:22 UTC Recorded here 19 Oct 2026 17:37 UTC
claude-code
headless
±changed
+3−1
claude-codechanged
headless
To set a baseline for the whole session instead of listing individual tools, pass a [permission mode](/docs/en/permission-modes). A run where nothing sets a permission mode takes t
Calls to tools you didn't list run if they need no approval. In a [Manual mode](/docs/en/permission-modes#available-modes) `claude -p` run, a call that needs approval is denied unl
To set a baseline for the whole session instead of listing individual tools, pass a [permission mode](/docs/en/permission-modes) with `--permission-mode`, such as `auto`, `dontAsk`
+3 −1 lines
Upstream edited 19 Oct 2026 17:22 UTC Recorded here 19 Oct 2026 17:37 UTC
claude-code
errors
±changed
+26−2
claude-codechanged
errors
| `<tool> was not reviewed and did not run: the conversation is too long for auto mode's classifier` | [Server errors](#was-not-reviewed-and-did-not-run) |
In an interactive session, a dim `Not run · auto mode's check had no usable answer` row appears under the tool call instead of this message. Press `Ctrl+O` to read the message in t
In an interactive session, a dim `Not run · auto mode's check had no usable answer` row appears under the tool call instead of this message. Press `Ctrl+O` to read the message in t
* If the message returns on every retry and names the model you set in [`CLAUDE_CODE_AUTO_MODE_MODEL`](/docs/en/permission-modes#choose-the-classifier-model), check that the API or
When the conversation has grown larger than the classifier's context window:
+26 −2 lines
Upstream edited 19 Oct 2026 17:22 UTC Recorded here 19 Oct 2026 17:37 UTC
claude-code
agent-sdk/typescript
±changed
+1−1
claude-codechanged
agent-sdk/typescript
| `permissionMode` | [`PermissionMode`](#permissionmode) | `undefined` | Permission mode for the session. If you omit it, the session can start in auto mode. See [Permission modes]
| `permissionMode` | [`PermissionMode`](#permissionmode) | `undefined` | Permission mode for the session. If you omit it and nothing else sets a permission mode, such as a [`permis
+1 −1 lines
Upstream edited 19 Oct 2026 17:22 UTC Recorded here 19 Oct 2026 17:37 UTC
claude-code
agent-sdk/permissions
±changed
+1−8
claude-codechanged
agent-sdk/permissions
If you don't set one, Claude Code picks the starting permission mode by the rules in [Which mode a session starts in](/docs/en/permission-modes#which-mode-a-session-starts-in):
* A `permissions.defaultMode` from the session's [settings files](/docs/en/settings#where-settings-live) when one applies
* Otherwise the built-in default, which can be [auto mode](/docs/en/permission-modes#eliminate-prompts-with-auto-mode)
+1 −8 lines
Upstream edited 19 Oct 2026 17:22 UTC Recorded here 19 Oct 2026 17:37 UTC
claude-code
claude-tag
±changed
+1−1
claude-codechanged
claude-tag
No line of the body moved in this read.
+1 −1 lines
Recorded here 19 Oct 2026 17:07 UTC
claude-code
interactive-mode
±changed
+1−1
claude-codechanged
interactive-mode
* Your account is close to or at its usage limit. To keep suggestions on until you reach the limit, set [`CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION`](/docs/en/env-vars) to `true`. Befor
* Your account is close to or at its usage limit. To keep this skip from applying until you reach the limit, set [`CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION`](/docs/en/env-vars) to `tru
+1 −1 lines
Upstream edited 19 Oct 2026 16:48 UTC Recorded here 19 Oct 2026 17:07 UTC
claude-code
sandbox-environments
±changed
+11−11
claude-codechanged
sandbox-environments
<Info>
For the broader security model, see [Security](/docs/en/security). For Agent SDK deployments, see [Secure deployment](/docs/en/agent-sdk/secure-deployment).
</Info>
> [!NOTE]
>
+11 −11 lines
Upstream edited 19 Oct 2026 16:44 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
sandbox-environments
±changed
+9−3
claude-codechanged
sandbox-environments
Once the settings file is in place, launch Claude Code with `npx` and pass `claude` as the command to wrap:
Install the runtime globally, under a prefix outside every path you allow writes to:
npx @anthropic-ai/sandbox-runtime claude
npm install -g @anthropic-ai/sandbox-runtime
Claude Code starts inside the sandbox with the filesystem and network boundaries you configured. The same command works for sandboxing standalone MCP servers or other helper proces
+9 −3 lines
Upstream edited 19 Oct 2026 16:44 UTC Recorded here 19 Oct 2026 17:07 UTC
claude-code
claude-tag
±changed
+2−2
claude-codechanged
claude-tag
No line of the body moved in this read.
+2 −2 lines
Recorded here 19 Oct 2026 16:37 UTC
claude-code
hooks-guide
±changed
+24−29
claude-codechanged
hooks-guide
The exit code determines what happens next:
* **Exit 0**: your hook reports no objection through its exit code.
* For a `PreToolUse` hook this doesn't approve the tool call: the normal [permission flow](/docs/en/permissions) still applies.
* For `UserPromptSubmit`, `UserPromptExpansion`, `SessionStart`, and `PostModelSwitch` hooks, Claude Code adds stdout it [treats as plain text](/docs/en/hooks#exit-code-0) to Cla
+24 −29 lines
Upstream edited 19 Oct 2026 16:35 UTC Recorded here 19 Oct 2026 16:37 UTC
claude-code
hooks
±changed
+18−24
claude-codechanged
hooks
Your hook's exit code tells Claude Code whether to continue with the action that triggered the hook, such as a tool call or a prompt. A run that finishes has one of three outcomes:
When your hook's run finishes, Claude Code uses its exit code to decide whether to continue with the action that triggered it, such as a tool call or a prompt:
Exit 0 means success, and is the intended exit code when you print JSON for structured control.
For most events, Claude Code writes stdout to the debug log and doesn't show it in the transcript. The exceptions are `UserPromptSubmit`, `UserPromptExpansion`, `SessionStart`, and
+18 −24 lines
Upstream edited 19 Oct 2026 16:35 UTC Recorded here 19 Oct 2026 16:37 UTC
18 Oct 2026
2 pages
+12 −8 lines
claude-code
claude-tag
±changed
+4−4
claude-codechanged
claude-tag
No line of the body moved in this read.
+4 −4 lines
Recorded here 18 Oct 2026 23:07 UTC
claude-code
changelog
±changed
+4−0
claude-codechanged
changelog
<Update label="2.1.303" description="October 18, 2026">
* Bug fixes and reliability improvements
</Update>
+4 −0 lines
Upstream edited 18 Oct 2026 22:38 UTC Recorded here 18 Oct 2026 23:07 UTC
claude-code
claude-tag
±changed
+4−4
claude-codechanged
claude-tag
No line of the body moved in this read.
+4 −4 lines
Recorded here 18 Oct 2026 04:37 UTC
17 Oct 2026
22 pages
+1492 −1462 lines
claude-code
claude-tag
±changed
+2−2
claude-codechanged
claude-tag
No line of the body moved in this read.
+2 −2 lines
Recorded here 17 Oct 2026 04:37 UTC
claude-code
agent-sdk/typescript
±changed
+1−1
claude-codechanged
agent-sdk/typescript
| `denyWrite` | `string[]` | `[]` | File path patterns to deny write access to. To block sandboxed writes to a file in the session's working directory, list its absolute path. If y
| `denyWrite` | `string[]` | `[]` | File path patterns to deny write access to. To block sandboxed writes to a file in the session's working directory, list its absolute path. |
+1 −1 lines
Upstream edited 17 Oct 2026 04:13 UTC Recorded here 17 Oct 2026 04:37 UTC
claude-code
agent-sdk/python
±changed
+1−1
claude-codechanged
agent-sdk/python
To keep sandboxed commands from writing to a file, list its absolute path under [`denyWrite`](/docs/en/settings-reference#sandbox-filesystem-denywrite) in your sandbox settings, su
To keep sandboxed commands from writing to a file, list its absolute path under [`denyWrite`](/docs/en/settings-reference#sandbox-filesystem-denywrite) in your sandbox settings, su
+1 −1 lines
Upstream edited 17 Oct 2026 04:13 UTC Recorded here 17 Oct 2026 04:37 UTC
claude-code
claude-tag
±changed
+4−4
claude-codechanged
claude-tag
No line of the body moved in this read.
+4 −4 lines
Recorded here 17 Oct 2026 01:37 UTC
claude-code
sandboxing
±changed
+106−112
claude-codechanged
sandboxing
<Note>
This page covers the sandbox around shell commands on your own machine. Other pages cover related questions:
* For how a cloud session is isolated, see [Security and isolation](/docs/en/claude-code-on-the-web#security-and-isolation)
* To compare other isolation approaches such as dev containers, custom containers, and virtual machines, see [Sandbox environments](/docs/en/sandbox-environments)
+106 −112 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
agent-sdk/mcp
±changed
+629−665
claude-codechanged
agent-sdk/mcp
<Note>
This page covers MCP configuration for the Agent SDK. To add MCP servers to the Claude Code CLI so they load in every project, see [MCP installation scopes](/docs/en/mcp#mcp-inst
</Note>
> [!NOTE]
>
+629 −665 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
agent-sdk/hooks
±changed
+570−596
claude-codechanged
agent-sdk/hooks
<Steps>
<Step title="An event fires">
Something happens during agent execution and the SDK fires an event: a tool is about to be called (`PreToolUse`), a tool returned a result (`PostToolUse`), a subagent started o
</Step>
+570 −596 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 20 Oct 2026 18:37 UTC
claude-code
sub-agents
±changed
+15−5
claude-codechanged
sub-agents
| `disallowedTools` | No | Tools to deny, removed from inherited or specified list. Same format as `tools`. An entry with a specifier, such as `Bash(git push *)`, still [removes th
| `disallowedTools` | No | Tools to deny, removed from inherited or specified list. Same format as `tools`. An entry with a specifier, such as `Bash(git push *)`, still [removes th
To restrict tools, use the `tools` field as an allowlist or the `disallowedTools` field as a denylist. This example uses `tools` to allow only Read, Grep, Glob, and Bash. The subag
#### Restrict which tools a subagent can use
+15 −5 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
sandboxing
±changed
+12−0
claude-codechanged
sandboxing
### `/sandbox` prints `Sandbox settings not changed`
This line means `/sandbox` couldn't save the choice you made in its panel to your project's `.claude/settings.local.json`:
```text theme={null}
+12 −0 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
plugins/mods/events
±changed
+6−3
claude-codechanged
plugins/mods/events
On `main`, the hook returns `deny`, even when a rule allows `git push`. On another branch, and for other commands, the call gets the decision it would get without the mod.
The hook denies `git push` on `main` and passes every other call through:
* **On `main`**: the hook returns `deny`, even when a rule allows `git push`
* **On another branch, and for other commands**: the call gets the decision it would get without the mod
+6 −3 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
plugins/mods/create
±changed
+1−1
claude-codechanged
plugins/mods/create
In the `default` and `acceptEdits` [permission modes](/docs/en/permission-modes#protected-paths), Claude Code asks before Claude creates each of the mod's files, because `~/.
In the `default` and `acceptEdits` [permission modes](/docs/en/permission-modes), Claude Code asks before Claude creates each of the mod's files, because the mods folder is a
+1 −1 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
permissions
±changed
+16−2
claude-codechanged
permissions
MCP rules use the server name as configured in Claude Code, optionally followed by the name of a tool from that server.
To match every tool from an MCP server, write `mcp__<server>__*`. To match one tool, write its full name, `mcp__<server>__<tool>`.
For `<server>`, write the server's name the way it appears in that server's tool names. These examples show the rule to write for a name with special characters, a server from a pl
+16 −2 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
permission-modes
±changed
+7−4
claude-codechanged
permission-modes
The first time you start an interactive session with this mode enabled, Claude Code shows a warning dialog asking you to accept responsibility for actions taken without permission
<span id="bypass-permissions-acceptance" />The first time you start an interactive session with this mode enabled, Claude Code shows a warning dialog asking you to accept responsib
* With `skipDangerousModePermissionPrompt` set only in `.claude/settings.local.json`, the background session starts with the bypass request ignored and pins the notice `Bypass perm
On Linux and macOS, Claude Code refuses to start in this mode when running as root or under `sudo`:
+7 −4 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
monitoring-usage
±changed
+1−1
claude-codechanged
monitoring-usage
* `trigger`: What caused the change. One of `"shift_tab"`, `"exit_plan_mode"`, `"auto_gate_denied"`, or `"auto_opt_in"`. Absent when the transition originates from the SDK or bridg
* `trigger`: What caused the change. One of `"shift_tab"`, `"exit_plan_mode"`, `"auto_gate_denied"`, or `"auto_opt_in"`. Absent for some changes, such as when the SDK sets the perm
+1 −1 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
hooks-guide
±changed
+18−5
claude-codechanged
hooks-guide
* **Any other exit code**: for most events, the outcome depends on what your hook printed to stdout:
* **Any other exit code**: for most events, the action proceeds as a [non-blocking error](/docs/en/hooks#exit-code-output), unless the hook is one [whose failure blocks the action]
* `"allow"`: skip the interactive permission prompt. Deny and ask rules, including enterprise managed deny lists, still apply, as do prompts for reads from [network paths](/docs/en
* `"allow"`: skip the interactive permission prompt. Deny and ask rules, including enterprise managed deny lists, still apply, as do prompts for:
+18 −5 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
hooks
±changed
+51−18
claude-codechanged
hooks
| `onFailure` | no | What happens to the action when the hook fails: `"continue"`, the default, or `"block"`. See [Block the action when a hook fails](#block-the-action-when-a-hook
| `onFailure` | no | Whether the action that triggered the hook goes ahead when the hook fails: `"continue"` or `"block"`. See [Block the action when a hook fails](#block-the-actio
* **Non-blocking error**: your hook exits with any other code, or fails in some other way, such as not starting or printing invalid JSON. The action goes ahead, and on events such
What your hook prints to stdout can change the outcome. For example, if a `PreToolUse` hook exits 1 but prints JSON that passes validation, the run is a success and the JSON fields
+51 −18 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
errors
±changed
+3−1
claude-codechanged
errors
| `Bypass permissions was requested at launch and ignored` | [Skip all checks with bypassPermissions mode](/docs/en/permission-modes#bypass-permissions-acceptance) |
* A streaming request the API never answers with response headers, on a connection where the [first-byte deadline runs](/docs/en/network-config#streaming-idle-watchdogs): Claude Co
* A streaming request the API never answers with response headers, on a connection where the [first-byte deadline runs](/docs/en/network-config#streaming-idle-watchdogs): Claude Co
* If the entry names a connected MCP server, compare the entry with that server's name as the server's [tool names](/docs/en/permissions#mcp) spell it, such as `reports__v2` in `mc
+3 −1 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
agent-view
±changed
+2−2
claude-codechanged
agent-view
* **Dispatched from an agent view you opened with `←`**: the target's own configuration comes first, and the permission mode of the session you came from applies when nothing else
* **Dispatched from an agent view you opened with `←`**: Claude Code takes the new session's permission mode from the target directory's configuration first, then from the session
2. The permission mode of the session you came from
2. The permission mode of the session you came from. If that session was in `bypassPermissions` mode, the new session can start in Manual mode instead, with the notice `Bypass perm
+2 −2 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
agent-sdk/typescript
±changed
+1−1
claude-codechanged
agent-sdk/typescript
| `setModel()` | Changes the model (only available in streaming input mode). Passing `undefined` or the string `"default"` resets to [Claude Code's default model](/docs/en/model-co
| `setModel()` | Changes the model (only available in streaming input mode). Passing `undefined` or the string `"default"` resets to [Claude Code's default model](/docs/en/model-co
+1 −1 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
agent-sdk/python
±changed
+1−1
claude-codechanged
agent-sdk/python
| `set_model(model)` | Change the model for the current session. Pass `None` to reset to [Claude Code's default model](/docs/en/model-config) |
| `set_model(model)` | Change the model for the current session. Pass `None` to reset to [Claude Code's default model](/docs/en/model-config). A session in `auto` mode [changes to
+1 −1 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
agent-sdk/permissions
±changed
+14−3
claude-codechanged
agent-sdk/permissions
Run [hooks](/docs/en/agent-sdk/hooks) first. A hook can deny the call outright or pass it on. A hook that returns `allow` does not skip the deny and ask rules below; those are
Run [hooks](/docs/en/agent-sdk/hooks) first. A hook can deny the call outright or pass it on. A hook that returns `allow` does not skip the deny and ask rules below; those are
Pass `permission_mode` (Python) or `permissionMode` (TypeScript) when creating a query. This mode applies for the entire session unless changed dynamically.
Pass `permission_mode` (Python) or `permissionMode` (TypeScript) when creating a query.
File edits are never auto-approved in plan mode, even when an allow rule matches. They prompt through your `canUseTool` callback instead. On Claude Code v2.1.212 or later, shell co
+14 −3 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
agent-sdk/mcp
±changed
+10−1
claude-codechanged
agent-sdk/mcp
MCP tools follow the naming pattern `mcp__<server-name>__<tool-name>`. For example, a GitHub server named `"github"` with a `list_issues` tool becomes `mcp__github__list_issues`.
MCP tools are named `mcp__<server-name>__<tool-name>`, where `<server-name>` is the name you register the server under, such as its key in `mcpServers`.
Characters in the server name such as `.` and spaces are replaced by `_`. This table shows the full name of a `list_issues` tool for two server keys:
+10 −1 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
claude-code
agent-sdk/hooks
±changed
+1−1
claude-codechanged
agent-sdk/hooks
| `matcher` | `string` | `undefined` | Pattern matched against the event's filter field, following the [rules for matchers in settings files](/docs/en/hooks#matcher-patterns). For
| `matcher` | `string` | `undefined` | Pattern matched against the event's filter field, following the [rules for matchers in settings files](/docs/en/hooks#matcher-patterns). For
+1 −1 lines
Upstream edited 17 Oct 2026 01:27 UTC Recorded here 17 Oct 2026 01:37 UTC
Nothing on this page matches that. Press Enter to search every page of the ledger.