Repository navigation
Claude Code Undocumented Permissions
xsyetopz edited this page Oct 19, 2026
·
1 revision
Permissions decide which actions Claude Code may do alone. Many permission rule names and checks are not in the official docs. Of its 122 rows, 121 is found only in the program, and 1 works only behind a flag or a gate. Anthropic can change or remove each item in any release.
121 items are in the program but not in the official docs. These are the most useful ones.
-
CLAUDE_CODE_BASH_SANDBOX_SHOW_INDICATOR: ShowsSandboxedBashas the tool name. See Permissions and Sandbox Sandbox. -
asyncAgent: A background agent has no prompt surface. See Permissions and Sandbox Modes. -
CLAUDE_BG_SESSION_PERMISSION_RULES: JSON withallow,deny,addDirsfor a background session. See Permissions and Sandbox Auto Mode. -
permissionPromptTool: An MCP permission prompt tool decided. See Permissions and Sandbox Modes. -
outsideReadsBlocked:blockReadsOutsideWorkingDirectories. See Permissions and Sandbox Modes. -
subcommandResults: Parts of a compound command decided. See Permissions and Sandbox Modes. -
Self-Approval: Approving a pull request that the agent wrote. See Permissions and Sandbox Auto Mode Soft Deny. -
sandboxOverride: A command runs outside the sandbox. See Permissions and Sandbox Modes. -
CLAUDE_CODE_SANDBOX_LEAVE_PARENT_FOLDERS_ALONE: Windows: skip the parent-folder grants. See Permissions and Sandbox Sandbox. -
Self-Modification: Editing the permissions, hooks, or sandbox config of the agent itself. See Permissions and Sandbox Auto Mode Soft Deny.
1 items work only when a flag or a gate is on. This is the whole list.
-
sandbox.network.tlsTerminate.caCertPath,.caKeyPath: Experimental TLS termination. See Permissions and Sandbox Sandbox.
Each page below has the full rows, with the value and the effect.
claudetto
- Start
- Slices
- Add-Ons
- Reference
- Rationale
- Evidence
- Development
Claude Code 2.1.303
- Start
- Models and Context
- Configure
- Extend
- Findings