This setting lets Claude Code explore only: it can read files, search, and list, but it cannot edit, write, or run commands.
Any action that would change the project is explicitly blocked.
That makes it safe to open an unfamiliar codebase or run an audit with no risk of accidental changes.
When to use
- For code reviews and security audits.
- When exploring a repo you don’t know and don’t want to touch.
- For demos where nothing should be modified.
How to use
Apply the setting; to edit again, swap in a permissions profile that allows Write and Edit.