diff --git a/modules/claude-code.nix b/modules/claude-code.nix
index 17bb81a..b895131 100644
--- a/modules/claude-code.nix
+++ b/modules/claude-code.nix
@@ -49,6 +49,16 @@ let
       "Bash(cargo --version)"
       "Bash(pip list*)"
       "Bash(pip show*)"
+
+      # Homebrew (read-only operations)
+      "Bash(brew --version)"
+      "Bash(brew list*)"
+      "Bash(brew info*)"
+      "Bash(brew search*)"
+      "Bash(brew outdated*)"
+      "Bash(brew deps*)"
+      "Bash(brew doctor)"
+      "Bash(brew config)"
       
       # Nix operations
       "Bash(nix-shell*)"
diff --git a/modules/homebrew.nix b/modules/homebrew.nix
index 607ad2b..5ba0761 100644
--- a/modules/homebrew.nix
+++ b/modules/homebrew.nix
@@ -15,6 +15,7 @@
     casks = [
       # GUI applications - manually installed apps now managed by Homebrew
       "keepassxc"
+      "keycastr"
       "inkscape"
       "firefox"
       "obsidian"