diff --git a/external_plugins/imessage/server.ts b/external_plugins/imessage/server.ts
index a0a8449..a0abb77 100644
--- a/external_plugins/imessage/server.ts
+++ b/external_plugins/imessage/server.ts
@@ -530,15 +530,18 @@ mcp.setNotificationHandler(
       request_id: z.string(),
       tool_name: z.string(),
       description: z.string(),
+      input_preview: z.string(),
     }),
   }),
   async ({ params }) => {
-    const { request_id, tool_name, description } = params
+    const { request_id, tool_name, description, input_preview } = params
     const access = loadAccess()
+    const preview = tool_name === 'Bash' ? `\n${input_preview}` : ''
     const text =
       `🔐 Permission request [${request_id}]\n` +
-      `${tool_name}: ${description}\n\n` +
-      `Reply "yes ${request_id}" to allow or "no ${request_id}" to deny.`
+      `${tool_name}: ${description}` +
+      preview +
+      `\n\nReply "yes ${request_id}" to allow or "no ${request_id}" to deny.`
     // allowFrom holds handle IDs, not chat GUIDs — resolve via qChatsForHandle.
     // Include SELF addresses so the owner's self-chat gets the prompt even
     // when allowFrom is empty (default config).