bypassPermissions
A high-privilege execution mode provided by Claude Code that allows interactive permission confirmations to be skipped in automated scripts or CI environments, enabling unattended continuous execution. This mode is intended for automated workflows but requires careful attention to associated security risks.
Timeline (last 90 days)
Common values of the Claude Agent SDK permission mode include default (calls not pre-approved require callback confirmation, and no callback means denial), acceptEdits (automatically accept file edits), dontAsk (deny if not pre-approved), and bypassPermissions (skip all permission checks).
In the Claude Agent SDK, deny rules can intercept the rm command and take effect in all modes (including bypassPermissions), but deny rules match the literal command, and forms like /bin/rm can bypass them, so a pre-tool-use hook is needed to check every bash call at the front of the chain.
Bypass permissions mode approves all operations unconditionally without prompting.
Under bypassPermissions mode or shell allow rules, dangerous rm commands targeting the root directory or home directory inside bash -c or sh -c scripts previously ran without prompting; this has been fixed to prompt first (corresponding to issue #96300).
bypassPermissions is a high-privilege execution mode provided by Claude Code that allows skipping interactive permission confirmations in automated scripts or CI environments to achieve unattended continuous execution.
All Facts (5)
Common values of the Claude Agent SDK permission mode include default (calls not pre-approved require callback confirmation, and no callback means denial), acceptEdits (automatically accept file edits), dontAsk (deny if not pre-approved), and bypassPermissions (skip all permission checks).
50%UnverifiedIn the Claude Agent SDK, deny rules can intercept the rm command and take effect in all modes (including bypassPermissions), but deny rules match the literal command, and forms like /bin/rm can bypass them, so a pre-tool-use hook is needed to check every bash call at the front of the chain.
50%UnverifiedBypass permissions mode approves all operations unconditionally without prompting.
50%UnverifiedUnder bypassPermissions mode or shell allow rules, dangerous rm commands targeting the root directory or home directory inside bash -c or sh -c scripts previously ran without prompting; this has been fixed to prompt first (corresponding to issue #96300).
50%UnverifiedbypassPermissions is a high-privilege execution mode provided by Claude Code that allows skipping interactive permission confirmations in automated scripts or CI environments to achieve unattended continuous execution.
50%