Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial
Home / Reference / CLI flags

--allowedTools

cli never mined documented JSON

A Claude Code CLI flag, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.

Also written --allowed-tools. Every list on this page counts all of these spellings together.

Tools that execute without prompting for permission. See permission rule syntax for pattern matching. To restrict which tools are available, use --tools instead. If you name one of the task-tracking tools here, Claude Code also opts the session in

Anthropic's own wording. Read off CLI reference, captured 2026-09-26.

First seen — never in a mined build
Last seen — never in a mined build
Builds0 / 149on this box, as of v2.1.308
Written about v0.2.39 first named in a changelog, 13 Mar 2025

In the changelogs

9

Releases whose published page names --allowedTools.

  1. v2.1.282
    Managed-only permission rules now also cover skills' allowed-tools lists

    With allowManagedPermissionRulesOnly on, user and project skills and commands can no longer grant themselves tools through allowed-tools

    found in this entry's text

  2. v2.1.282
    /status explains when only managed permission rules apply

    When an organisation limits permission rules to managed settings, /status now shows a row listing any allowed tools that were ignored

    found in this entry's text

  3. v2.1.269
    New control-channel request: list_permission_rules

    New control-channel request list_permission_rules exposes the same rules shown by /permissions

    found in this entry's text

  4. v2.1.267
    Session can now run with built-in tools entirely disabled, and plugins are blocked from adding tools in that mode

    Sessions can now run with all built-in tools disabled, and plugins are blocked from adding tools back in that mode

    found in this entry's text

  5. v2.1.257
    allowManagedPermissionRulesOnly semantics clarified/expanded

    The allowManagedPermissionRulesOnly description now spells out exactly which rule sources it ignores and which still apply.

    found in this entry's text

  6. v2.1.234
    Early flag scan no longer mistakes tool lists and directories for flags

    Tool lists and directories passed to flags are no longer misread as flags themselves at startup.

    named in this entry, found in this entry's text

  7. v2.1.232
    Cloud gateway sign-in explains its restart, and refuses when it cannot

    Cloud gateway sign-in explains its restart, and ends the session when a restart can't carry state.

    found in this entry's text

  8. v0.2.120
    Tool Permission Handling Improvements

    found in this entry's text

  9. v0.2.39
    Tool Management

    found in this entry's text

First cited

0

No release's published evidence quotes this name. The ledger indexes the Evidence lines of every changelog on this site, so this says nobody here has ever quoted it; it says nothing about how old the name is.

Presence across releases

0

The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.

Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the CLI flag does. All CLI flags.

Feedback