diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index b38535f..a3f294e 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -92,3 +92,5 @@ jobs:
           additional_permissions: |
             actions: read
           prompt: ${{ steps.get-prompt.outputs.prompt }}
+          # Allow gh CLI for issue management, npm for publishing
+          claude_args: '--allowedTools "Bash(gh:*)" "Bash(npm:*)" "Bash(pnpm:*)" "Bash(git:*)"'