~ / rigs / MikeVeerman / claude-permissions

MikeVeerman/claude-permissions

Curated permissions config for Claude Code — stop clicking Allow 47 times per session

↗ GitHub ★ 58 no license updated 7mo ago project Claude Code
share on X
ARCHETYPE
YOLO Cowboy
Permissions? Never heard of 'em. Ships at the speed of `--dangerously-skip-permissions`.
CONTEXT TAX · EVERY TURN
~0 tokens
Featherweight · median rig: 2.3k · breakdown
GUARDRAILS
2/5
Blocks destructive commands · Protects secrets · details

Copy this rig

$ git clone --depth 1 https://github.com/MikeVeerman/claude-permissions

MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.

Merge into .claude/settings.json (project) or ~/.claude/settings.json (user). Hook commands reference scripts in the source repo — copy those too.

{
  "permissions": {
    "deny": [
      "Bash(sudo *)",
      "Bash(rm -rf /*)",
      "Bash(rm -rf ~/*)",
      "Bash(chmod 777 *)",
      "Read(~/.ssh/*)",
      "Read(~/.gnupg/*)",
      "Read(~/.aws/*)",
      "Read(~/.config/gcloud/*)",
      "Read(**/.env)",
      "Read(**/.env.*)",
      "Read(**/secrets/*)",
      "Read(**/*credential*)",
      "Read(**/*password*)",
      "Edit(~/.ssh/*)",
      "Edit(~/.gnupg/*)",
      "Edit(~/.aws/*)",
      "Write(~/.ssh/*)",
      "Write(~/.gnupg/*)",
      "Write(~/.aws/*)"
    ]
  }
}

Permissions

deny (19)
Bash(sudo *)
Bash(rm -rf /*)
Bash(rm -rf ~/*)
Bash(chmod 777 *)
Read(~/.ssh/*)
Read(~/.gnupg/*)
Read(~/.aws/*)
Read(~/.config/gcloud/*)
Read(**/.env)
Read(**/.env.*)
Read(**/secrets/*)
Read(**/*credential*)
Read(**/*password*)
Edit(~/.ssh/*)
Edit(~/.gnupg/*)
Edit(~/.aws/*)
Write(~/.ssh/*)
Write(~/.gnupg/*)
Write(~/.aws/*)
ask (0)
—
allow (10)
Bash
Read
Edit
Write
Glob
Grep
WebFetch
WebSearch
Task
mcp__*

Similar rigs

copied ✓