allow
A Claude Code settings key, read out of the shipped bundle. It was in the build from v2.1.318 and was gone by v2.1.319.
Malformed or sneaky owner/repo names are rejected before any gh command is built.
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.223.
In the changelogs
22Releases whose published page names allow.
-
v2.1.319
Auto mode decisions can name the rule behind them and flag untrusted folders
Auto mode results can now name the allow or soft deny rule that applied, and a permission check can now report an untrusted folder
found in this entry's text
-
v2.1.314
Auto mode rule types each get a plain description
Claude Code now has a short description for each kind of auto mode rule: allow, soft deny, hard deny and environment
found in this entry's text
-
v2.1.305
Cloud sessions can allow or block MCP servers by host
In Anthropic cloud sessions, Claude Code can check each MCP server's host against an allow or deny list sent by the server
found in this entry's text
-
v2.1.293
Claude Desktop admin settings for a built-in browser and session retention
Claude Code bundles new Claude Desktop admin settings for a built-in browser's allowed sites and how long sessions are kept
found in this entry's text
-
v2.1.281
Auto-mode classifier prompt can be built without the user's auto-mode rules
The auto-mode classifier prompt can now be built with its allow, soft_deny, hard_deny and environment rule lists left empty
found in this entry's text
-
v2.1.281
Session permission rules can now carry added directories
Session permission rules can now hold an optional addDirs list next to allow and deny
found in this entry's text
-
v2.1.281
Permission check can reroute an allow to ask for served calls
A new permission pre-check can change an automatic allow into a prompt that asks you first
found in this entry's text
-
v2.1.269
New plugin hook events: session.attach, session.detach, tool.check
Plugins can now hook into session attach/detach and tool permission checks
found in this entry's text
-
v2.1.260
Host profile collection has its own telemetry
Forced-ask permission decisions now include a suggested standing allow rule where applicable.
found in this entry's text
-
v2.1.260
Permission tool-rules now redactable in config exports
Permission tool rules can now be redacted properly when exporting config.
found in this entry's text
-
v2.1.251
Confined sessions accept permissions only from their own command line
A confined session ignores permission grants from tools or plans, honoring only its startup flags.
found in this entry's text
-
v2.1.248
MCP server allow and deny lists get settings keys
You can allow or block specific MCP servers with allowedMcpServers and deniedMcpServers settings.
found in this entry's text
-
v2.1.248
Permission denials split into soft and hard
Permission decisions can now be soft or hard denials, with reasons like unreadable rules.
found in this entry's text
-
v2.1.248
Path heuristics no longer auto-allow remotely served tool calls
Remotely served tool calls no longer get auto-allowed by path guessing; they hit normal rules.
found in this entry's text
-
v2.1.232
Catch-all and role desktop overlays merge by meaning
Catch-all gateway policies merge desktop overlays key by key, so a strict base can't be loosened accidentally.
found in this entry's text
-
v2.1.223
Stricter owner/repo validation for gh commands
Malformed or sneaky owner/repo names are rejected before any gh command is built.
found in this entry's text
-
v2.1.136
Auto Mode Hard-Deny Rules
found in this entry's text
-
v2.1.118
Auto Mode Classifier $defaults Inheritance
found in this entry's text
-
v0.2.90
Tool Permission System
found in this entry's text
-
v0.2.69
Enhanced Permission System
found in this entry's text
-
v0.2.69
New Configuration Schema
found in this entry's text
-
v0.2.67
Permission System
found in this entry's text
First cited
0No release's published evidence quotes this name. The ledger indexes the Evidence lines of every changelog on this site, so this says nobody here has ever quoted it; it says nothing about how old the name is.
Presence across releases
2Build by build
2One row per release since the first build this name was read out of. Absent means the build was read and the name was not in it, never mined means no bundle for that release was ever archived, and a declared type or a default is only ever what that release's own bundle stated.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.