Hooks
Using agent hooks to check, warn about or block an action before it runs.
A hook is a script the agent runs before or after a tool call, and a pre-tool hook can stop the call before it happens. These guides show working hook scripts, how each agent reads their output, and where hooks fall short.
-
How to stop Claude Code from running destructive commands
Use deny rules, a PreToolUse hook that exits with code 2, the Bash sandbox and least-privilege credentials so Claude Code can't drop tables or delete infrastructure.
Browse by topic
- Claude Code: Running Anthropic's Claude Code safely: hooks, permissions, settings and guardrails.
- Permissions: Allow lists, deny lists, approval modes and credentials for coding agents.
- Databases: Protecting production databases from destructive queries and unsafe migrations by AI agents.
- Infrastructure: Keeping agents from deleting or changing cloud infrastructure, Terraform state and Kubernetes resources.
- Incidents: Public incidents where AI coding agents broke something, and what they teach.
- Guardrails: The general practice of putting safety checks between an AI agent and the systems it can change.