OpenCode Permissions: Allow, Ask or Deny Bash, Edit and Webfetch

• allow: run without approval.
• ask: prompt you for approval.
• deny: block the action.

Most permissions default to allow. doom_loop and external_directory default to ask. Reading .env files is denied by default, while *.env.example is allowed.

• read, edit, glob, grep, bash
• task (launching subagents), skill, lsp, question
• webfetch, websearch
• external_directory (paths outside the project)
• doom_loop (the same tool call repeating three times with identical input)

edit covers all file changes, including edit, write and patch.

Give a permission an object of patterns instead of a single value. * matches zero or more characters and ? matches one.

{
  "permission": {
    "bash": {
      "*": "ask",
      "git *": "allow",
      "npm *": "allow",
      "rm *": "deny"
    },
    "edit": {
      "*": "deny",
      "docs/*.mdx": "allow"
    }
  }
}

Bash patterns match parsed commands. A pattern like grep * allows arguments, but grep alone does not. If you pass arguments to git status, you need git status * to match.

Agents can have their own permission block under the agent key or in a markdown agent's frontmatter. Agent rules merge with the global config and take precedence.

{
  "agent": {
    "reviewer": {
      "description": "Reviews changes for bugs",
      "mode": "subagent",
      "permission": { "edit": "deny", "bash": "ask" }
    }
  }
}