Control which tools need approval
configuration
// what it does
The permission block gates what the agent may do without asking: set edit, bash, and webfetch to "allow", "ask", or "deny". "ask" prompts you each time (the Plan agent's default for edits and bash), "allow" runs silently, and "deny" blocks it outright.
// shell
$ { "permission": { "edit": "ask", "bash": "ask" } }// gotcha
Permissions cascade: an agent's own permission block (Plan sets edit and bash to ask) overrides the global one, so a change here may be masked by the agent you are running.