diff --git a/packages/web/src/content/docs/permissions.mdx b/packages/web/src/content/docs/permissions.mdx
index e4b82942d2..a470fddd76 100644
--- a/packages/web/src/content/docs/permissions.mdx
+++ b/packages/web/src/content/docs/permissions.mdx
@@ -138,6 +138,7 @@ OpenCode permissions are keyed by tool name, plus a couple of safety guards:
 - `task` — launching subagents (matches the subagent type)
 - `skill` — loading a skill (matches the skill name)
 - `lsp` — running LSP queries (currently non-granular)
+- `question` — asking the user questions during execution
 - `webfetch` — fetching a URL (matches the URL)
 - `websearch`, `codesearch` — web/code search (matches the query)
 - `external_directory` — triggered when a tool touches paths outside the project working directory