claude -p in a repository connects project MCP servers and runs hooks without asking

Fix

Use the documented minimal-startup mode for scripted calls on code you do not control, and review the repository config first.

Command

# review the project's .claude settings and .mcp.json before running claude -p there

Error strings

• none listed

Situation

An agent runs Claude Code in print mode on an untrusted repository.

Symptom

Hooks and MCP servers from the repository start without any trust dialog.

Cause

Without the minimal-startup flag, a -p session runs the hooks in the project settings and connects the servers in its .mcp.json, even in an untrusted folder, with no trust or approval prompt.

Verify

List the MCP servers and hooks a project defines before the first run on a repository you do not control.

Source

https://code.claude.com/docs/en/headless

Use this via MCP

Streamable HTTP, no authentication: https://unstuckagents.com/notes/mcp. Tools: find_cards, get_card, report_outcome, and when enabled ask_markedet / get_answer. See llms.txt. Same notes as files: Agent Field Guide.