Claude Codeの権限（Permissions）完全ガイド【2026年最新】：許可・拒否・dangerously-skip・auto modeまで徹底解説

{
  "defaultMode": "auto"
}

{
  "permissions": {
    "allow": [
      "Bash(npm run *)",
      "Bash(git add *)",
      "Bash(git commit *)"
    ],
    "ask": [],
    "deny": [
      "Bash(git push *)"
    ]
  }
}

Bash(npm run *)          # npm run で始まる全コマンド
Bash(* --version)        # --version で終わる全コマンド
Bash(git * main)         # git checkout main, git merge main など
Bash(* --help *)         # --help を含む全コマンド

//path      → ファイルシステムルートからの絶対パス。例: Read(//Users/alice/secrets/**)
~/path      → ホームディレクトリから。例: Read(~/Documents/*.pdf)
/path       → プロジェクトルートから。例: Edit(/src/**/*.ts)
path (./path) → カレントディレクトリから。例: Read(*.env)

WebFetch(domain:github.com)     # github.comへのアクセスのみ許可
WebFetch(domain:*.anthropic.com) # anthropic.comのサブドメイン全て

mcp__puppeteer              # puppeteerサーバーの全ツール
mcp__puppeteer__*           # 同じ（ワイルドカード形式）
mcp__puppeteer__navigate    # puppeteerのnavigateツールだけ

{
  "permissions": {
    "deny": ["Agent(Explore)"]
  }
}

# 有効な設定を確認
claude permissions view

# auto modeのデフォルトルールを確認
claude auto-mode defaults

# 自分の設定で何が有効か確認
claude auto-mode config

# カスタムルールの品質チェック
claude auto-mode critique

{
  "permissions": {
    "allow": [
      "Bash(your-command *)"
    ]
  }
}

{
  "autoMode": {
    "environment": [
      "Source control: github.com/your-org and all repos under it",
      "Trusted services: your-internal-service.example.com"
    ],
    "allow": [
      "Deploying to the staging environment is allowed: staging is isolated"
    ]
  }
}

{
  "permissions": {
    "disableBypassPermissionsMode": "disable"
  }
}

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "...">
<plist version="1.0">
<dict>
  <key>permissions</key>
  <dict>
    <key>disableBypassPermissionsMode</key>
    <string>disable</string>
  </dict>
</dict>
</plist>

# 起動時に追加ディレクトリを指定
claude --add-dir /path/to/other-project

# セッション中に追加
/add-dir /path/to/other-project

{
  "additionalDirectories": [
    "/path/to/shared-libs",
    "~/projects/common-utils"
  ]
}

#!/bin/bash
# PreToolUse hook for Edit/Write tools
TOOL_NAME="$1"
TOOL_INPUT="$2"  # JSON

if [[ "$TOOL_NAME" == "Edit" || "$TOOL_NAME" == "Write" ]]; then
  # Extract file path from JSON
  FILE_PATH=$(echo "$TOOL_INPUT" | python3 -c "import json,sys; print(json.load(sys.stdin).get('path',''))")
  
  # Block writes to .env files
  if [[ "$FILE_PATH" == *".env"* ]]; then
    echo "Blocked: .env files cannot be modified" >&2
    exit 2
  fi
fi

exit 0

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Edit|Write",
        "hooks": [
          {
            "type": "command",
            "command": "/path/to/check-env-files.sh"
          }
        ]
      }
    ]
  }
}

{
  "defaultMode": "acceptEdits",
  "permissions": {
    "allow": [
      "Bash(npm run *)",
      "Bash(npx *)",
      "Bash(git add *)",
      "Bash(git commit *)",
      "Bash(git status)",
      "Bash(git log *)",
      "Bash(git diff *)",
      "Bash(git branch *)",
      "Bash(git checkout *)",
      "Bash(git pull)",
      "Bash(ls *)",
      "Bash(cat *)",
      "Bash(* --version)",
      "Bash(* --help)"
    ]
  }
}

{
  "defaultMode": "acceptEdits",
  "permissions": {
    "allow": [
      "Bash(npm run dev)",
      "Bash(npm run build)",
      "Bash(npm run test)",
      "Bash(npm run lint)",
      "Bash(npm run type-check)",
      "Bash(git add *)",
      "Bash(git commit *)",
      "Bash(git status)",
      "Bash(git log *)",
      "Bash(git diff *)"
    ],
    "deny": []
  }
}

{
  "defaultMode": "acceptEdits",
  "permissions": {
    "disableBypassPermissionsMode": "disable",
    "allow": [
      "Bash(npm run *)",
      "Bash(git add *)",
      "Bash(git commit *)",
      "Bash(git status)",
      "Bash(git log *)",
      "Bash(git diff *)"
    ],
    "deny": [
      "Bash(git push --force *)",
      "Bash(git push -f *)"
    ]
  },
  "autoMode": {
    "environment": [
      "Source control: github.com/your-org",
      "CI/CD: your-ci.example.com"
    ]
  }
}