Configure cloud environments changedcloud-environments
Nearest release: v2.1.314, published 17 hours before upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 30 Oct 2026 17:44 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 30 Oct 2026 18:07 UTC.
Upstream edited
Recorded here
Lines+20added
Lines−20removed
From line
4
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits63to this page, all time
The whole hunk
from line 4, old and new numbered
/
from line 4
44
55> [!NOTE]
66>
7> Cloud environments apply to [cloud sessions](https://code.claude.com/docs/en/claude-code-on-the-web.md), which are available on Pro, Max, and Team plans, and for Enterprise users with [premium seats or Chat + Claude Code seats](https://support.claude.com/en/articles/11845131-use-claude-code-with-your-team-or-enterprise-plan).
7> Cloud environments apply to [cloud sessions](https://code.claude.com/docs/en/claude-code-on-the-web.md), which are available on Pro, Max, Ultra, and Team plans, and for Enterprise users with [premium seats or Chat + Claude Code seats](https://support.claude.com/en/articles/11845131-use-claude-code-with-your-team-or-enterprise-plan).
88
99Each [cloud session](https://code.claude.com/docs/en/claude-code-on-the-web.md) runs in a cloud environment. You can configure an environment to allow or deny [network access](#access-levels), [set environment variables](#set-environment-variables) for the session, store [network secrets](#add-network-secrets) that sessions use without seeing them, and run a [setup script](#setup-scripts) before Claude starts working.
1010
from line 28
2828If you don't have an environment yet, onboarding sets up the **Default** environment. How depends on where you onboard:
2929
3030* **CLI flows such as `/web-setup`**: create **Default** for you
31* **Web onboarding on Pro and Max**: creates **Default** for you
31* **Web onboarding on Pro, Max, and Ultra**: you get **Default** automatically
3232* **Web onboarding on Team and Enterprise**: shows a **Create your first cloud environment** form unless an Owner has turned on [Quick setup](https://code.claude.com/docs/en/claude-code-on-the-web.md#quick-setup-for-team-and-enterprise); keep the form's defaults and click **Create & finish** to get the same **Default** environment
3333
3434**Default** carries no configuration of its own:
from line 89
8989
9090A network secret is an API key or token you store on a cloud environment so Claude can call that API from any session in the environment without seeing the key. Anthropic's agent proxy adds the key to requests for the hosts you list, after each request leaves the session's VM, so the key itself stays outside the VM.
9191
92Network secrets are available on Pro, Max, Team, and Enterprise plans. To check whether you can add one yourself, see [Requirements](#requirements).
92Network secrets are available on Pro, Max, Ultra, Team, and Enterprise plans. To check whether you can add one yourself, see [Requirements](#requirements).
9393
9494#### Requirements
9595
from line 548
548548
549549With **Trusted** network access, sessions can reach the following domains by default. Domains marked with `*` indicate wildcard subdomain matching, so `*.gcr.io` allows any subdomain of `gcr.io`.
550550
551> **Anthropic services**
551> [accordion] Anthropic services
552552>
553553> * api.anthropic.com
554554> * docs.claude.com
from line 560
560560> * anthropic.com
561561> * [www.anthropic.com](http://www.anthropic.com)
562562
563> **Version control**
563> [accordion] Version control
564564>
565565> * github.com
566566> * [www.github.com](http://www.github.com)
from line 581
581581> * [www.bitbucket.org](http://www.bitbucket.org)
582582> * api.bitbucket.org
583583
584> **Container registries**
584> [accordion] Container registries
585585>
586586> * registry-1.docker.io
587587> * auth.docker.io
from line 598
598598> * \*.data.mcr.microsoft.com
599599> * public.ecr.aws
600600
601> **Cloud platforms**
601> [accordion] Cloud platforms
602602>
603603> * cloud.google.com
604604> * accounts.google.com
from line 629
629629> * yum.oracle.com
630630> * \*.r2.cloudflarestorage.com
631631
632> **JavaScript and Node package managers**
632> [accordion] JavaScript and Node package managers
633633>
634634> * registry.npmjs.org
635635> * [www.npmjs.com](http://www.npmjs.com)
from line 641
641641> * jsr.io
642642> * npm.jsr.io
643643
644> **Python package managers**
644> [accordion] Python package managers
645645>
646646> * pypi.org
647647> * [www.pypi.org](http://www.pypi.org)
from line 652
652652> * pypa.io
653653> * [www.pypa.io](http://www.pypa.io)
654654
655> **Ruby package managers**
655> [accordion] Ruby package managers
656656>
657657> * rubygems.org
658658> * [www.rubygems.org](http://www.rubygems.org)
from line 667
667667> * rvm.io
668668> * get.rvm.io
669669
670> **Rust package managers**
670> [accordion] Rust package managers
671671>
672672> * crates.io
673673> * [www.crates.io](http://www.crates.io)
from line 677
677677> * static.rust-lang.org
678678> * [www.rust-lang.org](http://www.rust-lang.org)
679679
680> **Go package managers**
680> [accordion] Go package managers
681681>
682682> * proxy.golang.org
683683> * sum.golang.org
from line 687
687687> * goproxy.io
688688> * pkg.go.dev
689689
690> **JVM package managers**
690> [accordion] JVM package managers
691691>
692692> * maven.org
693693> * repo.maven.org
from line 706
706706> * spring.io
707707> * repo.spring.io
708708
709> **Other package managers**
709> [accordion] Other package managers
710710>
711711> * packagist.org (PHP Composer)
712712> * [www.packagist.org](http://www.packagist.org)
from line 732
732732> * swift.org
733733> * [www.swift.org](http://www.swift.org)
734734
735> **Linux distributions**
735> [accordion] Linux distributions
736736>
737737> * archive.ubuntu.com
738738> * security.ubuntu.com
from line 744
744744> * [www.launchpad.net](http://www.launchpad.net)
745745> * \*.nixos.org
746746
747> **Development tools and platforms**
747> [accordion] Development tools and platforms
748748>
749749> * dl.k8s.io (Kubernetes)
750750> * pkgs.k8s.io
from line 776
776776> * pkg.stainless.com
777777> * binaries.prisma.sh
778778
779> **Cloud services and monitoring**
779> [accordion] Cloud services and monitoring
780780>
781781> * http-intake.logs.datadoghq.com
782782> * \*.datadoghq.com
from line 783
783783> * \*.datadoghq.eu
784784> * api.honeycomb.io
785785
786> **Content delivery and mirrors**
786> [accordion] Content delivery and mirrors
787787>
788788> * sourceforge.net
789789> * \*.sourceforge.net
from line 792
792792> * fonts.googleapis.com
793793> * fonts.gstatic.com
794794
795> **Schema and configuration**
795> [accordion] Schema and configuration
796796>
797797> * json-schema.org
798798> * [www.json-schema.org](http://www.json-schema.org)
from line 799
799799> * json.schemastore.org
800800> * [www.schemastore.org](http://www.schemastore.org)
801801
802> **Model Context Protocol**
802> [accordion] Model Context Protocol
803803>
804804> * \*.modelcontextprotocol.io
805805
No line in this hunk matches that.