diff --git a/.claude/settings.json b/.claude/settings.json
new file mode 100644
index 0000000..d3b3f74
--- /dev/null
+++ b/.claude/settings.json
@@ -0,0 +1,16 @@
+{
+  "permissions": {
+    "allow": [
+      "mcp__boltzmann-tools__read_file",
+      "Bash(ping *)",
+      "mcp__hub-tools__remote_list_hosts",
+      "mcp__hub-tools__remote_read_file",
+      "Bash(dig *)",
+      "mcp__ohm-tools__read_file",
+      "mcp__nc-tools__read_file",
+      "mcp__boltzmann-tools__list_dir",
+      "mcp__riemann-tools__search_files",
+      "mcp__ampere-tools__read_file"
+    ]
+  }
+}
diff --git a/.gitignore b/.gitignore
index da023c4..eb28800 100644
--- a/.gitignore
+++ b/.gitignore
@@ -14,6 +14,9 @@ memory.jsonl
 # Local config overrides (committed config.lua is the example/default)
 config.local.lua
 
+# Per-user Claude Code permission grants — settings.json is shared, .local is private
+.claude/settings.local.json
+
 # OS noise
 .DS_Store
 Thumbs.db