Claude Permissions — Development skill for Claude Code

Claude Permissions

**Stop clicking "Allow" 47 times per session.**

This is a curated permissions config for [Claude Code](https://docs.anthropic.com/en/docs/claude-code) that gives Claude the freedom to actually get work done — while keeping it away from the things that would ruin your day.

What it allows

Everything Claude needs to be productive:

• Bash — run commands, install packages, build things
• Read / Edit / Write — work with your files like a normal developer
• Glob / Grep — search your codebase
• WebFetch / WebSearch — look things up
• Task — spin up subagents
• MCP tools — all of them (mcp__*)

What it blocks

The stuff that should make you nervous:

Rule	Why
Bash(sudo *)	No root access. Ever.
Bash(rm -rf /*)	Not today, Satan
Bash(rm -rf ~/*)	Your home directory stays
Bash(chmod 777 *)	Security hygiene
Read(~/.ssh/*)	Your keys are your keys
Read(~/.gnupg/*)	Same for GPG
Read(~/.aws/*)	AWS credentials stay secret
Read(~/.config/gcloud/*)	GCP credentials too
Read(**/.env)	No peeking at env files
Read(**/.env.*)	Not even .env.local
Read(**/secrets/*)	Anything in a secrets/ folder
Read(**/*credential*)	Files with "credential" in the name
Read(**/*password*)	Files with "password" in the name
Edit(~/.ssh/*)	No modifying SSH keys
Edit(~/.gnupg/*)	No modifying GPG keys
Edit(~/.aws/*)	No modifying AWS config
Write(~/.ssh/*)	No writing to SSH directory
Write(~/.gnupg/*)	No writing to GPG directory
Write(~/.aws/*)	No writing to AWS directory

Usage

Copy `settings.json` to your Claude Code settings:

# Copy the permissions into your settings
cp settings.json ~/.claude/settings.json

Or if you already have a `settings.json` and just want to merge the permissions, copy the `permissions` block into your existing file.

**Note:** This config only