Enum PermissionMode 

pub enum PermissionMode {
    AlwaysAllow,
    Auto,
    AlwaysAsk,
}

Controls whether tool calls in CodingMcp require user approval before executing.

When a tool call is gated, the server asks the user for confirmation via MCP elicitation delivered through the MRTR pattern (MCP 2026-07-28): the call returns an InputRequiredResult with an allow/deny form, and the client retries the call with the decision — the gated tool only executes on an allowed retry. Clients that cannot elicit (no elicitation capability, or protocol older than 2026-07-28) get a tool error for gated calls.

Which tools are gated is derived from each tool’s destructive_hint annotation, so tools declared destructive (write_file, edit_file, bash, lsp_rename, and any future ones) are covered automatically. Read-only tools are never gated regardless of mode.

Variants

• AlwaysAllow (default) – All tools auto-execute without user approval.
• Auto – File writes auto-execute; bash commands that look destructive (rm, git push --force, redirect operators, etc.) trigger an elicitation prompt.
• AlwaysAsk – Every destructive-annotated tool call triggers an elicitation prompt.

See also

• CodingMcp::with_permission_mode – Set the mode on a server instance.

Variants

AlwaysAllow

Everything auto-executes (current default behavior).

Auto

File writes auto-execute; destructive bash commands trigger elicitation.

AlwaysAsk

Every destructive-annotated tool call triggers elicitation; read-only tools are ungated.

Trait Implementations

impl Clone for PermissionMode

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PermissionMode

fn default() -> Self

Returns the “default value” for a type.

impl PartialEq for PermissionMode

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PermissionMode

impl ValueEnum for PermissionMode

fn value_variants<'a>() -> &'a [Self]

All possible argument values, in display order.

fn to_possible_value<'a>(&self) -> Option<PossibleValue>

The canonical argument value.

fn from_str(input: &str, ignore_case: bool) -> Result<Self, String>

Parse an argument into Self.