Skip to main content
Tools are capabilities Claude uses automatically to complete your tasks. When you ask Claude to read a file, run a command, or search the web, it selects and invokes the appropriate tool behind the scenes. You do not call tools directly — Claude decides which tool to use and when. Some tools require your explicit approval the first time they are used, while others run automatically. You can configure permission behavior per tool using /permissions or by setting rules in your project’s settings file.

File system

Shell and execution

Web

Agents and orchestration

Task management

Planning and control

IDE and language services

Utility

The BashTool and FileWriteTool / FileEditTool will prompt you for approval before running unless you have pre-approved them with a permission rule. Read-only tools like FileReadTool, GlobTool, and GrepTool generally run automatically within allowed paths.
BashTool can run any shell command Claude constructs. Review the proposed command in the permission prompt before approving, especially for commands that delete files, modify system configuration, or access the network.
Use /permissions to create allow or deny rules for specific tools and path patterns so Claude can work without interrupting you for every file write or shell command.