--disallowedTools flag lets you restrict Claude's tool access; tool renames (LSTool→LS, View→Read) align names for use in that flag.
--disallowedTools