Claude Code: allow commands without prompts (permission modes and allow rules)

• default (labeled Manual): prompts on first use of each tool.
• acceptEdits: auto-accepts file edits and common filesystem commands such as mkdir, touch, mv and cp in your working directories.
• plan: explores and runs read-only commands but doesn't edit your source files.
• auto: no routine prompts; a background classifier checks shell commands and network requests against your request. It is the built-in starting mode from v2.1.283.
• dontAsk: denies anything that would prompt, except tools you pre-approved.
• bypassPermissions: skips prompts, including writes to protected paths like .git and .claude. Only for isolated containers or VMs.

• During a session: press Shift+Tab to cycle default → acceptEdits → plan (and other enabled modes).
• For one session: claude --permission-mode plan (or default, acceptEdits, auto, dontAsk).
• As a default: set permissions.defaultMode in ~/.claude/settings.json.

Allow rules are safer than skipping all checks. Put the * after the subcommand: Bash(git log *) allows only git log, while Bash(git *) allows every git command. Deny rules always win.

{
  "permissions": {
    "allow": ["Bash(npm run *)", "Bash(git commit *)"],
    "deny": ["Bash(git push *)"]
  }
}

Use /permissions inside Claude Code to see every rule and which settings file it comes from.