Tired of approving every file read? Configure your allowed tools in .claude/settings.json:
{
"permissions": {
"allow": [
"Read",
"Glob",
"Grep",
"Bash(git *)",
"Bash(npm test*)",
"Bash(npm run lint*)"
]
}
}
What to Auto-Approve
Safe to auto-approve:
Read: reading files can’t break anythingGlob: file search is harmlessGrep: content search is harmlessBash(git status*),Bash(git log*),Bash(git diff*): read-only git
Keep manual approval for:
Edit,Write: file modificationsBash(rm*),Bash(git push*): destructive operations- Any bash command that could have side effects
The Sweet Spot
Auto-approve reads, require approval for writes. Claude explores freely but always asks before changing anything.