Per-tool permissions #1833

Closed
opened 2026-02-16 17:32:51 -05:00 by yindo · 2 comments
Owner

Originally created by @dzervas on GitHub (Sep 26, 2025).

It would be very helpful to be able to set permissions per tool call.

For example I want query_prometheus: "allow" but create_dashboard: "ask" and delete_dashboard: "deny"

Originally created by @dzervas on GitHub (Sep 26, 2025). It would be very helpful to be able to set permissions per tool call. For example I want `query_prometheus: "allow"` but `create_dashboard: "ask"` and `delete_dashboard: "deny"`
yindo closed this issue 2026-02-16 17:32:51 -05:00
Author
Owner

@github-actions[bot] commented on GitHub (Sep 26, 2025):

This issue might be a duplicate of existing issues. Please check:

  • #1961: Discusses unifying tools and permissions configuration, which addresses the related concern of having separate permission controls
  • #2039: Requests finer-grained permissions for specific file operations, which is the same concept of per-tool permissions applied to the write tool

Feel free to ignore if none of these address your specific case.

@github-actions[bot] commented on GitHub (Sep 26, 2025): This issue might be a duplicate of existing issues. Please check: - #1961: Discusses unifying tools and permissions configuration, which addresses the related concern of having separate permission controls - #2039: Requests finer-grained permissions for specific file operations, which is the same concept of per-tool permissions applied to the write tool Feel free to ignore if none of these address your specific case.
Author
Owner

@rekram1-node commented on GitHub (Sep 26, 2025):

This will be done as part of #1961

@rekram1-node commented on GitHub (Sep 26, 2025): This will be done as part of #1961
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#1833