Permission Modes
The four-level permission control mechanism of Claude Code, comprising Plan (read-only analysis), Manual (approval before writing), Accept Edits (automatic code writing but prompting before commands) and Auto (no manual approval), switched via Shift+Tab.
Timeline (last 90 days)
In the Claude Agent SDK permission system, the allowed list only means pre-approval; tools not listed are not turned off but instead go to permission-mode handling; to remove a tool you must put its bare name in the disallowed list.
In the Claude Agent SDK, the check order for a tool request is: hooks → deny rules → ask rules → permission mode → allow rules → can use tool callback (in default mode, no callback means denial).
All Facts (2)
In the Claude Agent SDK permission system, the allowed list only means pre-approval; tools not listed are not turned off but instead go to permission-mode handling; to remove a tool you must put its bare name in the disallowed list.
50%UnverifiedIn the Claude Agent SDK, the check order for a tool request is: hooks → deny rules → ask rules → permission mode → allow rules → can use tool callback (in default mode, no callback means denial).
50%