Permissions#

Fine-grained control over which commands can be executed. Perfect for enterprise environments and shared agent setups.

Rule matching#

First matching rule wins. Unmatched commands are allowed by default. Rules use glob-style patterns against the space-separated command ID.

Allow and disallow#

# Allow specific commands
sdkck permission allow "jira issue list"
sdkck permission allow "jira issue view"

# Disallow a topic and everything under it
sdkck permission disallow "jira *"

# Allow everything
sdkck permission allow "*"

Pattern syntax#

Pattern	Matches
`jira`	Exact command ID "jira"
`jira issue create`	Exact command ID
`jira *`	All commands under the "jira" topic
`*`	Everything

List rules#

sdkck permission list

Export and import#

Share permission configs across your team:

# Export current rules
sdkck permission export permissions.json

# Import rules on another machine
sdkck permission import permissions.json

Reset#

# Reset all rules (prompts for confirmation)
sdkck permission reset

# Skip confirmation
sdkck permission reset --confirm