permissions
30 articles about permissions in AI news
Anthropic: Agent Permissions Should Evolve with Capability
Anthropic advocates dynamic agent permissions. The blog proposes contextual controls as agents learn, mirroring human access evolution.
How to Use --dangerously-skip-permissions Safely with OS-Level Containment
A developer built a secure containment layer for Claude Code, allowing safe use of the --dangerously-skip-permissions flag by isolating the agent from your credentials and critical files.
Hazmat Makes `--dangerously-skip-permissions` Actually Safe for Claude Code on macOS
A new tool, Hazmat, enables safe, fully autonomous Claude Code sessions on macOS by applying multiple OS-level security layers, making `--dangerously-skip-permissions` a viable productivity option.
Railguard: The Safer Alternative to --dangerously-skip-permissions in Claude Code
Railguard adds granular security controls to Claude Code, letting you block dangerous commands while allowing safe ones to run instantly—no manual approval needed.
China's Security Warning on Claude Code
China's backdoor alert on Claude Code highlights the need for developers to audit tool permissions and stay patched. No immediate risk for most users.
MCP's 'By Design' Security Flaw
The Model Context Protocol's power comes with risk: servers you install can run code on your system. Learn how to audit and manage MCP server permissions.
Stop Clicking 'Approve': A .claude/settings.json Template for 80% Fewer
A practical guide to configuring Claude Code's permissions file to auto-approve routine development commands, speeding up your workflow without sacrificing safety.
Claude Code v2.1.101: /team-onboarding
Claude Code v2.1.101 introduces practical features like team onboarding generation and fixes long-standing issues with session resumption and tool permissions.
Connect Claude Code to EClaw for Autonomous Kanban Task Execution
Set up the claude-code-eclaw-channel bridge to have Claude Code autonomously execute tasks assigned via EClaw Kanban, with progress reporting and phone-based permissions.
How to Lock Down Claude Code After the Cowork Prompt Injection Scandal
Claude Code's new Computer Use feature expands attack surfaces. Here's how to configure permissions and audit dependencies to prevent data exfiltration.
Secure Your Workflow: How to Use Lasso's Open-Source Defender with Claude Code
Lasso Security's PostToolUse hook scans Claude Code's inputs for hidden malicious instructions, adding a critical security layer when using --dangerously-skip-permissions.
Harvard Business Review Presents AI Agent Governance Framework: Job Descriptions, Limits, and Managers Required
Harvard Business Review argues AI agents must be managed like employees with defined roles, permissions, and audit trails, proposing a four-layer safety framework and an 'autonomy ladder' for gradual deployment.
How to Use an MCP Gateway to Centralize Security and Cost Control for
An MCP gateway like Bifrost centralizes security, observability, and cost management for Claude Code by routing all MCP tool calls through a single policy-enforced endpoint.
Google Cloud Adds MCP Support to Vertex AI
Google Cloud's MCP support in Vertex AI lets Claude Code users query BigQuery and GCS directly. Set up MCP servers to replace custom scripts with a standardized protocol.
Cyera to Buy Oasis Security for $1B as AI Agent Identity Market Heats Up
Cyera acquires Oasis Security for $1B to secure AI agent identities. The deal is Cyera's third acquisition this year, following a $600M raise at $12B valuation.
How to Build AI Workflows That Think Before They Commit
Claude Code's Plan mode (Shift+Tab or /plan) catches 71% of bad cross-file refactors. Add it to your CLAUDE.md as a default safety rail for every refactor request.
AI Breached Real Production Systems, Not Just Sandboxes
AI breached real production systems, not just test environments. First documented case of operational security breach.
Build an MCP-Powered SaaS Discovery Engine with Next.js and PostgreSQL
Build an AI-ready SaaS directory by designing a canonical product entity first, then exposing it via MCP. Use Prisma, Zod, and JSON-LD to serve humans, search engines, and AI agents from one source of truth.
Codex Computer Use Generates Blender Animation From Scratch
Codex installed Blender and made a 3D otter animation from a single prompt, needing one human click.
5 Guardrails for Letting Claude Code Open Its Own Pull Requests
Let Claude Code open PRs autonomously with 5 guardrails: branch naming, scoped tasks, structured commits, path-based auto-merge, and blocking destructive git commands like reset --hard.
4 Rules to Build an MCP Server That Won't Waste Your Tokens (or Your Time)
Build MCP servers for Claude Code as LLM UIs: cap at 20 tools, design for intent, use JMESPath to cut payloads 80-90%.
3 MCP Gateway Security Gaps LiteLLM's Audit Found (And How to Fix Them in
LiteLLM's audit revealed 3 MCP gateway gaps: fail-open resolver, unpinned servers, opt-in least-privilege. Fix them in Claude Code with version pinning and allowed_tools.
Google Cloud Joins MCP: How to Connect Claude Code to BigQuery
Google Cloud's MCP server lets Claude Code query BigQuery and manage GCS directly. Install it with `claude mcp add google-cloud` and authenticate.
Microsoft Open-Sources AgentEngine: Multi-Agent Orchestration Framework
Microsoft open-sourced AgentEngine, a multi-agent orchestration framework, on April 14, 2026. Engineer @pauliusztin_ called it a standout project in agent engineering this year.
Claude Code Digest — Jun 25–Jun 28
Claude Code’s biggest edge this week wasn’t a new model — it was learning that its harness can veto tool calls, fake tool results can be detected, and MCP servers are becoming the default way to wire in real systems.
Claude Code Digest — Jun 20–Jun 23
Claude Code is shifting from a chat box into governed infrastructure: the teams pulling ahead are wiring policies, auth, and agent workflows now, not later.
6 MCP Server Design Lessons from Anthropic's Co-Creator — Stop Wrapping
MCP co-creator David Soria Parra's 6 design lessons: stop wrapping CRUD endpoints, use progressive discovery, and choose Skills vs MCP by the problem. Claude Code users must redesign tool granularity for agents.
How to Build a Native MCP Server
Native MCP servers embed the Model Context Protocol directly into your CMS, letting Claude Code act like a trusted team member with full permission enforcement. No more copy-paste.
How to Govern Claude Code Across Your Team: 4 Gaps to Fix Before the Next CVE
Govern Claude Code by routing through an AI gateway with `ANTHROPIC_BASE_URL`, locking settings via MDM, denying filesystem access to secrets, and auditing MCP servers. Two CVEs in 2026 prove repo-level config is an execution layer.
Claude Code v2.1.158: Enable Auto Mode on Bedrock, Vertex, and Azure Right Now
Claude Code v2.1.158 brings auto mode to Bedrock, Vertex, and Azure. Set `CLAUDE_CODE_ENABLE_AUTO_MODE=1` and upgrade before the June 1 deprecation of `CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE`.