I’m considering connecting a few MCP servers to Claude Code, but I don’t want every available tool to be callable in every project. Is there a way to approve a small set of tools, such as read-only search, while keeping tools that change files or run commands unavailable?

If you’ve configured Claude Code MCP permissions for a team or shared repository, I’d be interested in how the rules are applied: are they tied to the user, the project, or the individual session?