Where do you draw the line with auto-approving terminal commands for Claude / coding agents?
Lately I’ve been using MCP servers and AI agents more in my everyday dev workflow—mostly for things like running test suites, checking git status, or inspecting project structures. It definitely speeds things up, but I still get paranoid about giving an agent full permission to run terminal commands freely.
Right now, my general approach is:
- Auto-approve: Read-only stuff (checking files, running tests, checking logs).
- Manual check: Installing dependencies, database migrations, or anything touching git push / environment variables.
For anyone using Claude or coding agents on daily projects—do you just manually approve every action, or have you set up sandboxed environments (like dev containers or Docker) so you can just let it run without babysitting every step?
Curious how others are balancing speed vs. safety here.