Subagent Tool Restrictions - Claude Code
Limit which tools a subagent can access.
Tool restrictions let you cap what a subagent is allowed to do. A "read-only researcher" literally can't write to disk if you don't include Edit or Write.
What it does
In the subagent's frontmatter, you list the exact set of tools the agent may use. Every other tool call from that agent fails immediately. This is the cleanest way to build roles with least-privilege guarantees - the safety is structural, not based on hoping Claude doesn't reach for a forbidden tool.
When to use it
- Researcher and auditor roles that should never write code.
- Tightly scoped agents for sensitive tasks (compliance checks, logs).
- Shared team agents where different contributors will invoke them.
- Defense in depth alongside permission rules.
Gotchas
- Over-restricted agents fail tasks in confusing ways. Err toward inclusion for genuine needs.
- Tool restrictions don't limit what the subagent can read - they limit what it can call.
- Adding tools later is easy; taking them back is harder once workflows depend on them.
Official docs: https://code.claude.com/docs/en/sub-agents.md#control-subagent-capabilities
Technical content at the intersection of AI and development. Building with AI agents, Claude Code, and modern dev tools - then showing you exactly how it works.
Was this helpful?
Related Guides
Related Tools
AgentCanvas
A hosted infinite canvas your headless AI agents drive over MCP. Any MCP-speaking agent - Claude Code, Codex, Cursor, or...
View Tool
Claude Code
Anthropic's agentic coding CLI. Runs in your terminal, edits files autonomously, spawns sub-agents, and maintains memory...
View ToolCodeburn
Interactive TUI dashboard that shows exactly where your Claude Code and Cursor tokens are going, in real time.
View Tool
Claude Opus 4.7
Anthropic's flagship reasoning model. Best-in-class for coding, long-context analysis, and agentic workflows. 1M token c...
View ToolRelated Videos
Generate Videos in Codex + Claude Code with This...
Check out HeyGen! https://heygen.1stcollab.com/developersdigest The video introduces HeyGen, an AI video generation platform with a rich API and a CLI that lets developers create, fetch, and manipula...
10x Design in Claude Code and Codex
Try Higgsfield: https://higgsfield.ai/s/higgsfield-general-campaign-developersdigest-juDMTi AI coding agents can build entire websites in minutes, but the default results often still look generic and...
Self Improving Applications with Claude Code & Codex
Build a Self‑Improving Next.js App: Supabase + Vercel Eve + GitHub Issues + Agent Loops Check out Supabase: https://supabase.plug.dev/1wWOTGS The video demonstrates how to build and deploy a self-im...
Related Posts
Claude Outages Are a Workflow Design Problem
Claude outages and 529 overloads expose whether your AI coding workflow has checkpoints, receipts, model-switch paths, a...
Claude Opus 4.8 Is an Agent Honesty Release
Claude Opus 4.8 looks like a benchmark bump, but the developer story is better honesty, dynamic workflows, and effort co...
Anthropic Sonnet 4.5 in Claude Code
Anthropic's Claude Sonnet 4.5 isn't just another model increment. The company claims they've observed it maintaining foc...
Make Your Coding Agents Talk: Voice Summaries with the Rime CLI
The Rime CLI streams natural-sounding text-to-speech straight from your terminal, so Claude Code, Codex, Devin, and Open...
How to Make Claude Code 10x Better at Design: Image and Video Assets From the Agent Loop
Claude Code and Codex can build a website in minutes, but the result often looks generic and obviously AI-generated. Hig...
Don't Paste the AI vs Vomit vs NoBuzz: AI Slop Tools Compared
dontpastetheai.com, Vomit, and NoBuzz hit Hacker News in the same week. A social contract, a local rewrite, and a second...
