{"name":"--allowed-tools","slug":"allowed-tools","family":"cli","title":"CLI flags","noun":"CLI flag","description":"Tools that execute without prompting for permission. See [permission rule syntax](\/docs\/en\/settings-reference#permission-rule-syntax) for pattern matching. To restrict which tools are available, use `--tools` instead. If you name one of the [task-tracking tools](\/docs\/en\/tools-reference#task-tool-availability) here, Claude Code also opts the session in","description_source":"docs","described_by":{"doc":"claude-code\/cli-reference","title":"CLI reference"},"presence":{"first_seen":"2.1.138","removed_in":null,"in_current_build":true,"newest_mined":"2.1.308","builds":149,"mined_builds":149,"first_cited":null},"aliases":["--allowedTools"],"entries":[{"version":"2.1.282","anchor":"allowmanagedpermissionrulesonly-now-also-ignores-allowed","heading":"Managed-only permission rules now also cover skills' allowed-tools lists","line":"With `allowManagedPermissionRulesOnly` on, user and project skills and commands can no longer grant themselves tools through `allowed-tools`","released_at":"2026-09-24 15:56:22","reason":"found in this entry's text"},{"version":"2.1.282","anchor":"status-shows-when-permission-rules-are-limited-to-managed-s","heading":"\/status explains when only managed permission rules apply","line":"When an organisation limits permission rules to managed settings, `\/status` now shows a row listing any allowed tools that were ignored","released_at":"2026-09-24 15:56:22","reason":"found in this entry's text"},{"version":"2.1.269","anchor":"new-control-channel-request-list-permission-rules","heading":"New control-channel request: list_permission_rules","line":"New control-channel request list_permission_rules exposes the same rules shown by \/permissions","released_at":"2026-09-11 18:12:49","reason":"found in this entry's text"},{"version":"2.1.267","anchor":"session-can-now-run-with-built-in-tools-entirely-disabled-a","heading":"Session can now run with built-in tools entirely disabled, and plugins are blocked from adding tools in that mode","line":"Sessions can now run with all built-in tools disabled, and plugins are blocked from adding tools back in that mode","released_at":"2026-09-09 18:25:42","reason":"found in this entry's text"},{"version":"2.1.257","anchor":"allowmanagedpermissionrulesonly-semantics-clarifiedexpanded","heading":"allowManagedPermissionRulesOnly semantics clarified\/expanded","line":"The allowManagedPermissionRulesOnly description now spells out exactly which rule sources it ignores and which still apply.","released_at":"2026-09-01 17:15:33","reason":"found in this entry's text"},{"version":"2.1.234","anchor":"early-flag-scan-no-longer-mistakes-tool-lists-and-directorie","heading":"Early flag scan no longer mistakes tool lists and directories for flags","line":"Tool lists and directories passed to flags are no longer misread as flags themselves at startup.","released_at":"2026-08-17 18:19:13","reason":"named in this entry, found in this entry's text"},{"version":"2.1.232","anchor":"cloud-gateway-sign-in-explains-its-restart-and-refuses-when-","heading":"Cloud gateway sign-in explains its restart, and refuses when it cannot","line":"Cloud gateway sign-in explains its restart, and ends the session when a restart can't carry state.","released_at":"2026-08-13 21:30:53","reason":"found in this entry's text"},{"version":"0.2.120","anchor":"tool-permission-handling-improvements","heading":"Tool Permission Handling Improvements","line":null,"released_at":"2025-05-19 04:59:13","reason":"found in this entry's text"},{"version":"0.2.39","anchor":"tool-management","heading":"Tool Management","line":null,"released_at":"2025-03-13 01:21:08","reason":"found in this entry's text"}],"entries_total":9,"docs":[{"source":"claude-code","path":"cli-reference","title":"CLI reference","documented":true},{"source":"claude-code","path":"fullscreen","title":"Fullscreen rendering","documented":false},{"source":"claude-code","path":"github-actions","title":"Claude Code GitHub Actions","documented":false},{"source":"claude-code","path":"self-hosted-environments-configuration","title":"Customize sessions in self-hosted environments","documented":false},{"source":"claude-code","path":"best-practices","title":"Best practices for Claude Code","documented":false},{"source":"claude-code","path":"changelog","title":"Claude Code changelog","documented":false},{"source":"claude-code","path":"desktop","title":"Desktop application","documented":false},{"source":"claude-code","path":"gitlab-ci-cd","title":"Claude Code GitLab CI\/CD","documented":false},{"source":"claude-code","path":"headless","title":"Run Claude Code programmatically","documented":false},{"source":"claude-code","path":"managed-settings","title":"Deploy managed settings","documented":false}],"docs_total":13,"gates":[],"related":[{"name":"--allowed","slug":"allowed","description":null},{"name":"--allowedTools","slug":"allowedtools","description":"Tools that execute without prompting for permission. See [permission rule syntax](\/docs\/en\/settings-reference#permission-rule-syntax) for pattern matching. To restrict which tools are available, use `--tools` instead. If you name one of the [task-tracking tools](\/docs\/en\/tools-reference#task-tool-availability) here, Claude Code also opts the session in"}],"url":"https:\/\/changelogs.core-directive.com\/reference\/cli\/allowed-tools","family_url":"https:\/\/changelogs.core-directive.com\/reference\/cli.json"}