Settings & Permissions

allowedTools, trust levels, API key config, and controlling what Claude Code can and cannot do.

What You Will Learn

• settings.json structure: where it lives and what it controls
• allowedTools: pre-approving specific tools without prompts
• Permission modes: auto-approve vs prompt for each action
• API key management: environment variable vs config file
• Restricting Claude Code to specific directories or file types