What
When Claude Code builds the settings for running an eval or a workflow, the disallowed_tools list from the base configuration and the one from the override are now combined. Before, the override's list replaced the base list.
Why
Tools blocked in a parent configuration stay blocked when an override adds its own list.
Names in the bundledisallowed_tools
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up disallowed_tools, on Subagents in the SDK.
disallowed_tools=["Agent(fork)"],agent-sdk/subagents see the edit
Two sources agreeTwo things we can check say the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up disallowed_tools, on Subagents in the SDK.
Anthropic's release notes agree
Added --disallow-tools and a disallowed_tools case field to claude plugin eval to keep specific built-in tools, such as Agent, out of eval…