Permission rules for a coding agent are not in one file. They are in up to five at once: a machine-wide managed policy, the project file your team commits, a git-ignored local file, your user file…
whats-allowed-mcp is an MCP project maintained in the stcmain/whats-allowed-mcp repository. The maintainer describes its purpose as “Permission rules for a coding agent are not in one file. They are in up to five at once: a machine-wide managed policy, the project…”. Read the project documentation for the complete scope.
The documented npm package is whats-allowed-mcp. The configuration below comes from the maintainer’s example; adapt its paths and account values to your environment.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| whats_allowed | The headline: which files contribute, how many deny/ask/allow rules, the winning defaultMode, blanket allows, hooks, and how many rules misbehave. Start here |
| permission_sources | Which file decides, in precedence order — existence, parse state, rule counts, and what a leading / anchors to in each one |
| rule_findings | Every rule whose documented behaviour differs from its apparent intent, with the reason and the documented alternative |
| unattended_surface | What proceeds with nobody watching: default mode, blanket allows, extra directories, mode guards, and hook commands |
{
"mcpServers": {
"whats-allowed": {
"command": "npx",
"args": [
"-y",
"whats-allowed-mcp"
]
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.
Retrieve version-aware library documentation and code examples with Context7 MCP, using resolve-library-id and query-docs.
Use Microsoft’s Playwright MCP server to navigate pages, inspect accessibility snapshots, fill forms and capture browser screenshots.
Connect GitHub MCP to repositories, issues and pull requests with GitHub’s hosted service or a locally run server.
Use the Supabase MCP server to inspect database schemas, query project data and retrieve docs through a project-scoped connection.
Search Linear issues and projects, inspect work context and manage updates through Linear’s hosted MCP server with OAuth.