Claude code via custom github action

[Amansaxena001]

We want to run the claude code github action via our custom gh action workflow that can fix the sentry issues and raise a PR. When I'm running the worfkflow im getting
Claude requested permissions to use mcp__sentry__find_organizations, but you haven't granted it yet.

Here is my pipeline
name: Sentry Auto Fix

on:
  push:
    branches:
      - "my branch"

env:
  SENTRY_ISSUE_ID: "sentry-id"
  SENTRY_PROJECT_ID: "sentry-project-id"

jobs:
  auto-fix-sentry-issue:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          fetch-depth: 0

      - name: Analyze and Fix Sentry Issue
        uses: anthropics/claude-code-base-action@beta
        with:
          prompt: |
            Analyze and fix Sentry issue ${{ env.SENTRY_ISSUE_ID }} from project ${{ env.SENTRY_PROJECT_ID }}.

            Steps:
            1. Get the Sentry issue details using the MCP Sentry tool
            2. Analyze the error and determine the root cause
            3. Create a new branch for the fix
            4. Implement the necessary code changes to fix the issue
            5. Commit the changes and create a pull request

            Focus on understanding the error first, then implementing a proper fix following the project's coding standards.
          allowed_tools: "mcp__sentry"
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY_SENTRY_BUG_RESOLUTION }}
          mcp_config: |
            {
              "mcpServers": {
                "sentry": {
                  "command": "npx",
                  "args": ["@sentry/mcp-server@latest", "--access-token=${{ secrets.SENTRY_AUTH_TOKEN }}"],
                  "env": {
                    "SENTRY_AUTH_TOKEN": "${{ secrets.SENTRY_AUTH_TOKEN }}"
                  }
                }
              }
            }

[niebloomj]

Put this in the allowed tools "mcp__sentry__find_organizations"

[mj-deving]

Ran into this myself. The issue is that allowed_tools: "mcp__sentry" doesn't actually cover the individual tools — you need to specify them explicitly or use a wildcard pattern.

Two options that work:

Option 1: Wildcard (covers all Sentry tools at once)

allowed_tools: "Bash,Read,Write,Edit,mcp__sentry__*"

Option 2: List the specific tools you need

allowed_tools: "Bash,Read,Write,Edit,mcp__sentry__find_organizations,mcp__sentry__get_issue_details,mcp__sentry__get_error_details"

The naming convention follows mcp__<server-name>__<tool-name>. So when Claude asks for mcp__sentry__find_organizations, it needs that exact string in the allowed list.

One thing that tripped me up — make sure you're also including the core tools (Bash, Read, Write, Edit) in allowed_tools. If you only list MCP tools, Claude can't actually read or edit your code to fix the issue.

Also worth noting: if you're using claude-code-base-action@beta, consider switching to anthropics/claude-code-action@v1 which has better MCP handling out of the box.