▶ quest log

Safer Alternative to Bypass Permissions: Allow + Deny Lists in Claude Code

Claude Code / Skills◆ Advanced@itsmariahbrunnersaved JUN 11

◇ Could this help me?

Yes: This allow/deny list pattern is directly applicable to this project right now. We run in bypass mode but should have explicit deny rules for rm -rf and git push --force. General Claude Code update.

✦ Walkthrough+10 xp / step

Instead of enabling bypass permissions entirely:
Go into Claude Code permissions settings.
Build an allow list: add every command you know is safe (e.g. npm run, git status, reading files). Claude will run these instantly without asking.
Build a deny list: add anything potentially destructive (e.g. rm -rf, git push --force, sudo). Claude will block these explicitly and cannot be overridden.
This gives bypass-level speed for safe commands while keeping hard guardrails on dangerous ones.

0 / 5 steps · adopt for +40

$ suggested_prompt+40xp

Set up an allow list and deny list in this project's Claude Code permissions. Allow list: npm run, git status, git log, git diff, reading files. Deny list: rm -rf, git push --force, sudo, DROP TABLE. Show me the settings.json changes.

Safer Alternative to Bypass Permissions: Allow + Deny Lists in Claude Code

More from Claude Code / Skills

Self-Improving Agent Skills From an Open Source Optimizer

Chaining Plan, Goal, Background Agents, and Review

A Claude skill that heals your other skills after each session