A session that skips permissions shows up
A session in bypass mode is reported from the Mac it ran on, and an agent starting another agent with it is blocked.
A bypass, stopped
- Reported with the person
- A session started in bypass mode shows up on the Mac it ran on, under the person signed in there.
- Allowed once, on purpose
- The agent or person asks from the record. An admin allows it once or for a while, and the retry passes.
- Agents can’t hand it on
- An agent that starts another agent with the bypass flags is matched like any command.
The Device reports and bypass policy
Sessions that skip the client’s own permissions.
- It installs as Observe, so you see your own traffic first. Turn it to Block when you are ready.
- A session is reported when the adapter detects it; agents starting another agent with the bypass flags are matched as commands.
Related use cases and clients
- MCP servers off the org listTools from servers your org hasn’t approved are blocked, and text that tries to instruct the agent is flagged.
- Destructive operationsRecursive deletes, cleans and drops are blocked until someone allows them.
- Set up Claude CodeEvery shell command, edit, read, fetch and MCP call in Claude Code passes the adapter before it runs.