--allowedTools<rules...>
Lists the tools and call patterns that run without asking for permission.
FlagsPermissions and securitycurrent
What the documentation does not say
This decides what runs unprompted, not what exists. To take a tool away from Claude entirely, that is --tools or --disallowedTools. Rules take the permission syntax, so Bash(git log *) allows one command family and nothing more.
- Arguments
- <rules...>
- Also known as
- --allowed-tools