Merge pull request #1031 from atxtechbro/fix/mcp-wildcard-permissions-1030

fix(claude-code): remove wildcards from MCP permission patterns

Author: atxtechbro

.claude/settings.json

@@ -29,15 +29,15 @@
       "Bash(check-mcp-logs:*)",
       "Bash(python:*)",
 
-      "mcp__git*",
-      "mcp__github-read*",
+      "mcp__git",
+      "mcp__github-read",
       "mcp__github-write__create_pull_request",
       "mcp__github-write__add_issue_comment",
       "mcp__github-write__update_issue",
       "mcp__brave-search",
       "mcp__filesystem",
       "mcp__gdrive",
-      "mcp__playwright*"
+      "mcp__playwright"
     ],
     "additionalDirectories": ["*"]
   },

knowledge/principles/permissive-default-surgical-removal.md

@@ -3,7 +3,7 @@
 Start with maximum capability and transparency, then surgically remove only what violates security or the spilled coffee principle. This inverts traditional security thinking (restrictive by default) in favor of developer experience and visibility.
 
 ## Core Pattern
-- **Wildcards over enumeration**: `mcp__git*` not 27 individual entries
+- **Server-level permissions**: `mcp__git` grants all tools from that server (wildcards not supported)
 - **All access by default**: `additionalDirectories: ["*"]`, `WebFetch(domain:*)`
 - **Full visibility**: `verbose: true`, keep all output transparent
 - **Surgical removal**: Remove only specific dangerous operations like `claude config set`
@@ -18,7 +18,7 @@ Traditional security says "deny all, allow specific" but in a trusted developmen
 ## Examples from Practice
 - Started with `Bash(claude config:*)` → removed only `set` operations
 - Enabled all directories access rather than maintaining allowed lists
-- Kept all MCP servers with wildcards rather than individual permissions
+- Kept all MCP servers with server-level permissions rather than individual tool permissions
 - Disabled telemetry/reporting at the source rather than filtering data
 
 ## Relationship to Other Principles