bmottin/claude_mac
1
0
Fork 0
forked from bchanot/claude
Code Pull Requests Activity

chore(perms): explicit ask-gate for all magic MCP tools (job8 A)

Browse Source 
Empty allowlist stays empty for mcp__magic__* (deny-by-default,
no auto-exec ever). All 4 tools now explicit in permissions.ask
so confirmation is guaranteed regardless of default-mode fallthrough,
instead of relying on undocumented absence. No wildcard.
This commit is contained in:
Bastien Chanot
2026-07-07 19:23:33 +02:00
parent e9241d5d7c
commit bb7f25adc1
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
settings.json
+5 -1
View File
@@ -226,7 +226,11 @@
"Bash(mv *)", "Bash(mv *)",
"Bash(git stash pop*)", "Bash(git stash pop*)",
"Bash(git stash drop*)", "Bash(git stash drop*)",
"Bash(git stash clear)" "Bash(git stash clear)",
"mcp__magic__21st_magic_component_builder",
"mcp__magic__21st_magic_component_refiner",
"mcp__magic__21st_magic_component_inspiration",
"mcp__magic__logo_search"
], ],
"defaultMode": "auto", "defaultMode": "auto",
"disableBypassPermissionsMode": "disable", "disableBypassPermissionsMode": "disable",