Allow the commands you trust, and keep the prompt for everything else.
- On a permission prompt, choose "Yes, and don't ask again for" the command. The prompt example offers npm test *. Claude Code saves that rule to .claude/settings.local.json at the root of your git repository, so it applies to future sessions in that repo.
- To review or add rules yourself, open /permissions.
- To share rules with a team, commit the permission settings to version control. Each developer can still customize their own.
- Claude Code already runs a built-in set of read-only commands without asking.
- To stop approving every file edit, switch to the acceptEdits mode: press Shift+Tab until the status bar shows accept edits on.
- The bypassPermissions mode skips permission prompts, including for writes to protected paths. Don't use it on a machine with secrets, SSH keys or production access.
Reply with the commands you want to allow and people can suggest rules.