diff --git a/.claude/settings.local.json b/.claude/settings.local.json
index 023f0fe..677e5a6 100644
--- a/.claude/settings.local.json
+++ b/.claude/settings.local.json
@@ -1,7 +1,6 @@
 {
   "permissions": {
     "allow": [
-      "WebSearch",
       "WebFetch(*)",
       "Bash(openspec:*)",
       "Bash(git:*)",
@@ -12,6 +11,9 @@
       "mcp__context7__query-docs",
       "mcp__exa__web_search_exa",
       "mcp__exa__get_code_context_exa"
+    ],
+    "deny": [
+      "WebSearch"
     ]
   }
 }