Tip: Use settings.autoMode.hard_deny in Claude Code v2.1.136 to Block Specific Tools in Auto Mode
Releasebot·medium signal
Claude Code v2.1.136 introduces settings.autoMode.hard_deny — a configuration that permanently blocks specific tools from being used when the agent runs in auto mode. Unlike the existing soft deny which prompts for confirmation, hard deny prevents the tool from being called entirely. This gives teams granular control over agent behavior in enterprise or CI environments where certain operations (like git push or file deletion) should never happen automatically.