Courses/Claude Code in Practice/Permissions, Hooks and MCP

Boss: Lock Down the Team Setup

Noor joins the six-person billing-api team as an intern. The repo holds scripts/deploy-prod.sh and a .env of live keys. Sam asks you to make sure no Claude Code session reaches production without a person, without slowing the other five: deny rules, a hook on the deploy script, a scoped .mcp.json, and a check that holds when nobody is watching.