diff --git a/modules/home/development.nix b/modules/home/development.nix
index cc49a7bf..9fdc6c00 100644
--- a/modules/home/development.nix
+++ b/modules/home/development.nix
@@ -43,31 +43,92 @@ in {
           enabledMcpjsonServers = ["linear" "figma"];
           permissions = {
             allow = [
-              "Bash(find *)"
+              # File exploration
+              "Bash(cat *)"
+              "Bash(cut *)"
+              "Bash(diff *)"
+              "Bash(du *)"
               "Bash(echo *)"
+              "Bash(file *)"
+              "Bash(find * -name *)"
+              "Bash(find * -type *)"
+              "Bash(find * -path *)"
               "Bash(grep *)"
-              "Bash(rg *)"
               "Bash(head *)"
-              "Bash(tail *)"
-              "Bash(cat *)"
+              "Bash(jq *)"
               "Bash(ls *)"
+              "Bash(readlink *)"
+              "Bash(realpath *)"
+              "Bash(rg *)"
+              "Bash(sort *)"
+              "Bash(tail *)"
+              "Bash(tr *)"
+              "Bash(uniq *)"
               "Bash(wc *)"
               "Bash(which *)"
-              "Bash(nix *)"
+              # Environment
+              "Bash(env)"
+              "Bash(hostname)"
+              "Bash(printenv *)"
+              "Bash(pwd)"
+              "Bash(whoami)"
+              # Networking
+              "Bash(dig *)"
+              "Bash(nslookup *)"
+              "Bash(ping -c *)"
+              # Nix
+              "Bash(nix build *)"
+              "Bash(nix develop *)"
+              "Bash(nix eval *)"
+              "Bash(nix flake *)"
+              "Bash(nix fmt *)"
+              "Bash(nix log *)"
+              "Bash(nix path-info *)"
+              "Bash(nix profile list*)"
+              "Bash(nix registry list*)"
+              "Bash(nix search *)"
+              "Bash(nix show-derivation *)"
+              "Bash(nix store *)"
+              "Bash(nix why-depends *)"
               "Bash(nix-eval-flake *)"
-              "Bash(git log *)"
-              "Bash(git diff *)"
-              "Bash(git status)"
-              "Bash(git show *)"
+              # Git
               "Bash(git add *)"
+              "Bash(git blame *)"
               "Bash(git branch *)"
+              "Bash(git diff *)"
+              "Bash(git log *)"
+              "Bash(git remote -v*)"
+              "Bash(git remote show *)"
+              "Bash(git show *)"
+              "Bash(git stash list*)"
+              "Bash(git status)"
+              "Bash(git tag -l *)"
+              "Bash(git tag --list *)"
+              # GitHub CLI
               "Bash(gh api:*)"
-              "Bash(mkdir *)"
+              "Bash(gh issue list*)"
+              "Bash(gh issue status*)"
+              "Bash(gh issue view*)"
+              "Bash(gh pr checks*)"
+              "Bash(gh pr diff*)"
+              "Bash(gh pr list*)"
+              "Bash(gh pr status*)"
+              "Bash(gh pr view*)"
+              "Bash(gh release list*)"
+              "Bash(gh release view*)"
+              "Bash(gh repo view*)"
+              "Bash(gh run list*)"
+              "Bash(gh run view*)"
+              "Bash(gh search:*)"
+              # Graphite
+              "Bash(gt log*)"
+              "Bash(gt ls*)"
+              "Bash(gt status*)"
+              # System
               "Bash(journalctl:*)"
+              "Bash(mkdir *)"
               "Bash(systemctl list-jobs:*)"
               "Bash(systemctl status:*)"
-              "Bash(* --version)"
-              "Bash(* --help *)"
               "WebFetch(domain:raw.githubusercontent.com)"
               "WebFetch(domain:github.com)"
               "WebSearch"