Permissions: Allow, Ask, Deny
Claude Code permissions control how autonomous Claude can be.
Use Allow for safe, repeated development tasks:
- Running tests
- Formatting code
- Reading source files
- Running familiar project commands
Use Ask when an action may affect the system, dependencies, or important data:
- Installing dependencies
- Running unfamiliar scripts
- Deleting files
- Network access
- Changes with broader system impact
Use Deny for things Claude should not access or perform:
- Reading
.envfiles - Accessing secret directories
- Dangerous destructive commands
- Production credentials
Recommended principle
Section titled “Recommended principle”Allow safe repeated development tasks. Ask for impactful or uncertain actions. Deny secrets and irreversible operations.