Configure Allowlist

Merges a curated set of safe permission rules into a Claude Code settings file, plus any currently-connected read-only MCP tools. Deterministic + idempotent — never removes existing entries, never adds destructive commands.

Default target

.claude/settings.json (committed/team-shared). Override with the user's choice:

• .claude/settings.local.json — personal, gitignored
• ~/.claude/settings.json — global, all projects

Workflow