[Feature Request] Allow commands that don't include a given pattern?

[malkomalko]

I have an MCP tool that does an eval to run code against my current running server. It'd be nice to auto allow anything that doesn't include FileSystem or Request modules for security, and right now I'm not sure that's possible.

Any thoughts on this?

[malkomalko]

Side note: It appears that something like "Bash(find * | rg *)" is not supported in allow and feel that would be useful as well.

[anuramat]

Did you try --permission-prompt-tool?

[wolffiex]

this isn't really possible given the current way that MCP works. you'll have to change your config to auto-allow the tool. If you haven't seen it, try /allowed-tools in a Claude Code session

[github-actions[bot]]

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.