Deploy self-hosted environments to production changedself-hosted-environments-deploy
Nearest release: v2.1.314, published 5 hours after upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 29 Oct 2026 18:51 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 29 Oct 2026 19:07 UTC.
Upstream edited
Recorded here
Lines+6added
Lines−1removed
From line
59
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits54to this page, all time
#### GitHub API access with the GitHub CLI
The whole hunk
from line 59, old and new numbered
/
from line 59
5959
6060| Host | Port | When required |
6161| :- | :- | :- |
62| `api.github.com` | 443 | With or without `--use-anthropic-git-proxy`, when the runner image includes the [GitHub CLI](#github-api-access-with-the-github-cli) and you give sessions a github.com credential, such as a `GH_TOKEN` |
6263| `downloads.claude.ai` | 443 | At install time, when you install or update Claude Code on the host with the native installer; the `install.sh` script itself is served from `claude.ai`. At session runtime, only when sessions install plugins from the official Anthropic marketplace. |
6364| `storage.googleapis.com` | 443 | At session runtime, for the plugin install counts and metadata shown in `/plugin`. |
6465| `code.claude.com` and `claude.com` | 443 | Documentation lookups by the built-in claude-code-guide agent and pre-approved WebFetch requests during sessions. Blocking these hosts only affects documentation lookups. |
from line 284
283284* **`jq`**: install `jq` in the image if you want `--jq` to work
284285* **[`CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC`](https://code.claude.com/docs/en/env-vars)**: if the session environment sets it, Claude Code doesn't provide the built-in `gh`, and the session has no `gh`
285286
286When the image includes the GitHub CLI, sessions use it.
287#### GitHub API access with the GitHub CLI
288
289If your runner image includes the GitHub CLI for sessions to use, have your [wrapper script](https://code.claude.com/docs/en/self-hosted-environments-configuration.md#provision-credentials-scoped-to-the-session-creator) mint a short-lived, least-scoped `GH_TOKEN` per session for the session's creator. When `gh` is on the `PATH` that Claude Code starts with, the session has that `gh` and no [built-in `gh`](#github-api-access-without-the-github-cli). With the token, that `gh` reaches GitHub with whatever access the token grants and outside Anthropic-managed git, so allow [`api.github.com`](#network-requirements).
290
291With Anthropic-managed git, leave the GitHub CLI out of the image to use the built-in `gh` instead.
287292
288293#### Trust a private certificate authority with Anthropic-managed git
289294
No line in this hunk matches that.