MCP Rules

MCP tool permission patterns:

mcp__<server_name> — matches any tool provided by the server name.
mcp__<server_name>__* — wildcard syntax that also matches all tools from server.
mcp__<server_name>__<tool> — match a specific tool from a server.

{
  "permissions": {
    "allow": [
      "mcp__puppeteer__puppeteer_navigate",
      "mcp__puppeteer__puppeteer_screenshot",
      "mcp__github__create_pull_request",
      "mcp__github__list_repositories"
    ],
    "ask": ["mcp__puppeteer__*", "mcp__github__*"],
    "deny": ["mcp__puppeteer", "mcp__stripe", "mcp__github__delete_repository"]
  }
}