WebFetch Rules

The WebFetch tool is when Claude goes out to the internet to fetch data. It takes a domain name.

{
  "permissions": {
    "allow": ["WebFetch(domain:github.com)", "WebFetch(domain:docs.anthropic.com)"],
    "ask": ["WebFetch(domain:stackoverflow.com)", "WebFetch(domain:reddit.com)"],
    "deny": ["WebFetch(domain:malicious-site.com)", "WebFetch"]
  }
}

Related: Permission Rules, Bare Name Tool Rules