# Inspect the repository without changing it: read, search, shell, and web lookup.
claude:
  allowed_tools:
    - Read
    - Glob
    - Grep
    - Bash
    - WebSearch
    - WebFetch
opencode:
  allowed_tools:
    - read
    - glob
    - grep
    - bash
    - websearch
    - webfetch
  network_access: true
codex:
  network_access: true