Subagent Tool Restrictions - Claude Code
Limit which tools a subagent can access.
Tool restrictions let you cap what a subagent is allowed to do. A "read-only researcher" literally can't write to disk if you don't include Edit or Write.
What it does
In the subagent's frontmatter, you list the exact set of tools the agent may use. Every other tool call from that agent fails immediately. This is the cleanest way to build roles with least-privilege guarantees - the safety is structural, not based on hoping Claude doesn't reach for a forbidden tool.
When to use it
- Researcher and auditor roles that should never write code.
- Tightly scoped agents for sensitive tasks (compliance checks, logs).
- Shared team agents where different contributors will invoke them.
- Defense in depth alongside permission rules.
Gotchas
- Over-restricted agents fail tasks in confusing ways. Err toward inclusion for genuine needs.
- Tool restrictions don't limit what the subagent can read - they limit what it can call.
- Adding tools later is easy; taking them back is harder once workflows depend on them.
Official docs: https://code.claude.com/docs/en/sub-agents.md#control-subagent-capabilities
Technical content at the intersection of AI and development. Building with AI agents, Claude Code, and modern dev tools - then showing you exactly how it works.
Was this helpful?
Related Guides
Related Tools
Claude Agent SDK
Anthropic's SDK for building agents on the same tools, agent loop, and context management that power Claude Code. Python...
View ToolAgentCanvas
A hosted infinite canvas your headless AI agents drive over MCP. Any MCP-speaking agent - Claude Code, Codex, Cursor, or...
View Tool
Claude Code
Anthropic's agentic coding CLI. Runs in your terminal, edits files autonomously, spawns sub-agents, and maintains memory...
View ToolCodeburn
Interactive TUI dashboard that shows exactly where your Claude Code and Cursor tokens are going, in real time.
View ToolRelated Videos
Generate Videos in Codex + Claude Code with This...
Check out HeyGen! https://heygen.1stcollab.com/developersdigest The video introduces HeyGen, an AI video generation platform with a rich API and a CLI that lets developers create, fetch, and manipula...
10x Design in Claude Code and Codex
Try Higgsfield: https://higgsfield.ai/s/higgsfield-general-campaign-developersdigest-juDMTi AI coding agents can build entire websites in minutes, but the default results often still look generic and...
Self Improving Applications with Claude Code & Codex
Build a Self‑Improving Next.js App: Supabase + Vercel Eve + GitHub Issues + Agent Loops Check out Supabase: https://supabase.plug.dev/1wWOTGS The video demonstrates how to build and deploy a self-im...
Related Posts
Claude Fable 5.1 in Claude Code: How to Switch, Pin, and Pay Less
Claude Code v2.1.257 points /model fable at Fable 5.1: 1M context, $10/$50 per MTok, $0.25 cache reads. Setup, gotchas,...
Claude Design, Slides and Docs in Any Chat: How to Use Them
Claude Design, Slides and Docs now open in any Claude chat, Claude Code session or the Artifacts tab, on every plan. Exa...
Claude for Startups Offer Paused: What Founders Do Now
Claude for Startups paused its free Claude Team year and $1,000 API credit offer at capacity. What the program page says...
Claude Advisor Tool vs a Bigger Model: When the Pairing Pays
Anthropic's own runs: a Fable 5.1 advisor added 1.7 points to Opus 5.5 for 2.1x the cost. When the Claude advisor tool p...
Claude Code Retry Watchdog: Keep Unattended Runs Alive
CLAUDE_CODE_RETRY_WATCHDOG=1 makes Claude Code wait out 429 and 529 errors instead of failing after 10 retries. When to...
Claude Max API Credits: $100 a Month, What They Cover
Claude Max and Team plans now include a monthly Claude API credit, starting at $100 on Max 5x. What it covers, what it d...
