Tutorials
Claude Agent SDK: tools vs allowedTools, and what a subagent definition silently accepts
allowedTools auto-approves, tools restricts. That half is documented. What is not: an AgentDefinition has no allowedTools field, and the SDK forwards one verbatim to the CLI anyway, unvalidated.
9 min read10