Permissions Audit

Review and reorganize Claude Code permission settings so global settings are the source of truth, project-local files stay minimal, and read vs write operations have clear separation.

When to Use

• Reviewing what tools and commands are pre-allowed
• Cleaning up accumulated ad-hoc permission entries
• After adding a new MCP server and deciding which operations to pre-allow
• Ensuring global vs project-local settings are properly split
• Periodic hygiene check on permission sprawl

Phase 1: Discover All Settings Files

Scan for every settings file that contributes to the effective permission set.