--permission-prompt-tool
A Claude Code CLI flag, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Specify an MCP tool to handle permission prompts in non-interactive mode. Claude Code waits for that tool's MCP server to connect before running the first turn, up to the MCP_TIMEOUT startup timeout, 30 seconds by default. <br /><br />The prompt tool can't approve an MCP tool marked as requiring user interaction: Claude Code converts an allow result for one to a deny. This restriction requires Claude Code v2.1.199 or later
Anthropic's own wording. Read off CLI reference, captured 2026-09-26.
In the changelogs
10Releases whose published page names --permission-prompt-tool.
-
v2.1.300
Handling of
--permission-prompt-toolwas restructuredThe handler behind
--permission-prompt-toolis now wrapped in a separate helper, and a related input and output shortcut changedfound in this entry's text
-
v2.1.299
Permission requests worded by a host app are handled differently
With
--permission-prompt-tool, Claude Code now checks whether a permission request carries wording from the host app instead of a local-only markfound in this entry's text
-
v2.1.283
Hooks can no longer answer permission requests meant for a person
With --permission-prompt-tool, permission requests marked person-only must be answered by the prompt tool, not by a hook
found in this entry's text
-
v2.1.265
CLI option class renamed (q -> Y) and error class renamed (Ht -> It); no behavior change
Internal CLI option and error classes were renamed with no change in behavior
found in this entry's text
-
v2.1.259
New
--permission-prompts host|noneCLI/SDK option to silently auto-deny promptsA new --permission-prompts option lets print sessions auto-deny anything that would prompt instead of asking the host.
found in this entry's text
-
v2.1.259
New
--permission-prompts noneCLI flag for headless print sessionsIn print mode you can pick who answers permission prompts: the host, or none, which auto-denies without asking.
found in this entry's text
-
v2.1.246
Permission prompts deny cleanly when the MCP server behind
--permission-prompt-toolis goneIf the server behind --permission-prompt-tool disconnects, checks now deny cleanly instead of using a stale tool.
named in this entry, found in this entry's text
-
v2.1.229
Permission-prompt-tool errors reportable without leaking tool names
Permission-prompt-tool errors sent as telemetry no longer include your tool names.
named in this entry, found in this entry's text
-
v1.0.14
Enhanced MCP Tool Error Messages
found in this entry's text
-
v1.0.14
Tool Permission Filtering
found in this entry's text
First cited
4The earliest release whose published evidence quoted --permission-prompt-tool was v2.1.229, 12 Aug 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the CLI flag does. All CLI flags.