diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index 321fabc..ca25c5b 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -39,7 +39,12 @@ jobs:
           plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
           plugins: 'code-review@claude-code-plugins'
           prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }} --comment'
-          show_full_output: true
+          # The action starts its inline-comment MCP server only when --allowedTools
+          # names it; without it the plugin's comment tool is missing and Claude falls
+          # back to `gh api`, which is denied. The list mirrors the plugin's own
+          # allowed-tools frontmatter.
+          claude_args: |
+            --allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(gh issue view:*),Bash(gh search:*),Bash(gh issue list:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh pr list:*)"
           # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
           # or https://code.claude.com/docs/en/cli-reference for available options