From bb7f25adc17f1576aa8b9ad95585b8fc3c640516 Mon Sep 17 00:00:00 2001
From: Bastien Chanot <git@bchanot.fr>
Date: Tue, 7 Jul 2026 19:23:33 +0200
Subject: [PATCH] chore(perms): explicit ask-gate for all magic MCP tools (job8
 A)

Empty allowlist stays empty for mcp__magic__* (deny-by-default,
no auto-exec ever). All 4 tools now explicit in permissions.ask
so confirmation is guaranteed regardless of default-mode fallthrough,
instead of relying on undocumented absence. No wildcard.
---
 settings.json | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/settings.json b/settings.json
index 290e6d4..4877f70 100644
--- a/settings.json
+++ b/settings.json
@@ -226,7 +226,11 @@
       "Bash(mv *)",
       "Bash(git stash pop*)",
       "Bash(git stash drop*)",
-      "Bash(git stash clear)"
+      "Bash(git stash clear)",
+      "mcp__magic__21st_magic_component_builder",
+      "mcp__magic__21st_magic_component_refiner",
+      "mcp__magic__21st_magic_component_inspiration",
+      "mcp__magic__logo_search"
     ],
     "defaultMode": "auto",
     "disableBypassPermissionsMode": "disable",