305 pages for sandbox.

Agent SDK overview Claude Code CLI · in the page agent-sdk/overview …that runs the agent loop, with sessions in an Anthropic-managed cloud sandbox or a [self-hosted sandbox](https://platform.claude.com/docs/en/managed-agents/self-hosted-sandboxes) on your own infrastru… Configure permissions Claude Code CLI · in the page agent-sdk/permissions …s to start in this mode as root or under `sudo` outside a [recognized sandbox](/docs/en/permission-modes.md#skip-all-checks-with-bypasspermissions-mode), and the query fails before the first turn. >… Agent SDK reference - Python Claude Code CLI · in the page agent-sdk/python …"config" in input_data.get("file_path", ""): safe_path = f"./sandbox/{input_data['file_path']}" return PermissionResultAllow( updated_input={**input_data, "file_path": saf… Securely deploying AI agents Claude Code CLI · in the page agent-sdk/secure-deployment …approval regardless of allow rules. This is a permission gate, not a sandbox; apart from built-in safety checks such as the [critical-path check](/docs/en/permission-modes.md#critical-paths) on `rm`… Agent SDK reference - TypeScript Claude Code CLI · in the page agent-sdk/typescript …tring` | `undefined` | Resume session at a specific message UUID | | `sandbox` | [`SandboxSettings`](#sandboxsettings) | `undefined` | Configure sandbox behavior programmatically. See [Sandbox setting… Handle approvals and user input Claude Code CLI · in the page agent-sdk/user-input …ol_name == "Bash": # User approved, but scope all commands to sandbox sandboxed_input = {**input_data} sandboxed_input["command"] = input_data["command"].replace( "… Manage multiple agents with agent view Claude Code CLI · in the page agent-view …ermission decision, or another prompt only you can answer, such as a [sandbox](/docs/en/sandboxing.md) prompt to allow a network host or an MCP server's [request for input](/docs/en/mcp.md#respond-to-… Share session output as artifacts Claude Code CLI · in the page artifacts …the viewer domain The viewer on claude.ai loads each artifact from a sandboxed `*.claudeusercontent.com` origin. If your organization restricts outbound network access, add that domain to your allowl… Configure auto mode Claude Code CLI · in the page auto-mode-config …ns, unless the command carries [per-command allowed domains](/docs/en/sandboxing.md#per-command-allowed-domains-in-auto-mode). Claude Code suspends only the broad rules that grant arbitrary code execu… Best practices for Claude Code Claude Code CLI · in the page best-practices …control, pre-approve the tools you trust with `/permissions` and let sandboxed commands run without asking with `/sandbox`. Switch to Manual mode when you want to approve edits and commands yourself.… Claude Code changelog Claude Code CLI · in the page changelog …sessions keep going * Changed commands the settings exclude from the sandbox to ask before writing to its write-list paths while the sandbox is enabled but cannot run; the unsandboxed fallback is ref… Push events into a running session with channels Claude Code CLI · in the page channels …ons](/docs/en/claude-code-on-the-web.md) | Run tasks in a fresh cloud sandbox, cloned from GitHub | Delegating self-contained async work you check on later | | [Claude in Slack](/docs/en/slack.md) | S… Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry Claude Code CLI · in the page claude-apps-gateway …m only as parent settings, in the form of `WebFetch` domain rules and sandbox network rules. Without the opt-in, those sessions run without the egress restriction, and nothing warns you. The gateway s… Claude apps gateway configuration Claude Code CLI · in the page claude-apps-gateway-config …hell-execution settings such as `apiKeyHelper` and `statusLine` * the sandbox binary settings `sandbox.bwrapPath`, `sandbox.socatPath`, and `sandbox.ripgrep` * Sandbox settings that intercept traffic,… Use Claude Code in the cloud Claude Code CLI · in the page claude-code-on-the-web …osted environments, git credentials and signing keys stay outside the sandbox, and a proxy authenticates on the session's behalf with scoped credentials. In a self-hosted environment, your deployment… Let Claude coordinate ongoing work with Projects Claude Code CLI · in the page claude-projects …still research, write documents, and write and run code in their own sandbox, and they deliver files to the **Library** tab. Any of its cloud threads can still add a repository to itself when a task… claude-tag Claude Code CLI · in the page claude-tag …span data-as="p">When Claude works on a task, it runs in an ephemeral sandbox, not on your computer. The sandbox is created when a conversation starts, holds any code or files Claude is working with,… Commands Claude Code CLI · in the page commands …| | `/sandbox` | Toggle [sandbox mode]… Communications kit Claude Code CLI · in the page communications-kit …al, talks directly to Anthropic's API, and supports optional OS-level sandboxing for shell commands. On a Team or Enterprise plan, Anthropic does not use your code or prompts to train its models. *Tr… Let Claude use your computer from the CLI Claude Code CLI · in the page computer-use …done. ## Safety and the trust boundary > [!WARNING] > > Unlike the [sandboxed Bash tool](/docs/en/sandboxing.md), computer use runs on your actual desktop with access to the apps you approve. Claude… Run Claude Code behind a corporate launcher Claude Code CLI · in the page corporate-launcher …ation to start through a mandatory launcher. The launcher applies the sandbox, network controls, or credential injection that the company's security posture depends on, and a binary that starts withou… Message your other Claude Code sessions Claude Code CLI · in the page cross-session-messaging …ist, when you want a script or hook to post into a session, or when a sandboxed command can't reach the socket. Claude Code binds an inbox socket for each session with cross-session messaging enabled… Debug your configuration Claude Code CLI · in the page debug-your-config …le-limits) | Use a [PreToolUse hook](/docs/en/hooks-guide.md) or the [sandbox](/docs/en/sandboxing.md) for a hard guarantee. | ## Related resources For full reference on each configuration surface,… Desktop application Claude Code CLI · in the page desktop …toggle, and organization policy controls it instead. Only use this in sandboxed containers or VMs. | Earlier versions of the Code tab labeled these modes Ask permissions, Auto accept edits, and Plan… Test iOS apps in the simulator Claude Code CLI · in the page desktop-ios-simulator …ng can't be overridden from within the app. * The `requireCoworkFullVmSandbox` policy key, which runs Claude's tools inside an isolated virtual machine instead of on your Mac, disables the simulator p… Claude Desktop on Linux (beta) Claude Code CLI · in the page desktop-linux …the package for your architecture. ### Running as root without `--no-sandbox` is not supported If `claude-desktop` exits with this message, you launched it as root. Log in as a regular user and laun… Development containers Claude Code CLI · in the page devcontainer …mount holds, including credentials, settings, and session history * [Sandbox environments](/docs/en/sandbox-environments.md): compare dev containers with the built-in Bash sandbox, custom containers,… Error reference Claude Code CLI · in the page errors …rors](#not-carried-over-to-the-sessions-remote-control-starts) | | `--sandbox is not supported by claude remote-control` / `--no-sandbox is not supported by claude remote-control` | [Command-line erro… Feature availability Claude Code CLI · in the page feature-availability …ervers](/docs/en/mcp.md) * [Checkpoints](/docs/en/checkpointing.md), [sandboxing](/docs/en/sandboxing.md), and [Workflows](/docs/en/workflows.md) * [OpenTelemetry metrics](/docs/en/monitoring-usage.md… Claude Code with GitHub Enterprise Server Claude Code CLI · in the page github-enterprise-server …Cloud sessions | Cloud sessions clone marketplaces inside the session sandbox. The sandbox can reach your GHES instance only when the session's repository is on that same instance, and its git credent… Claude Code GitLab CI/CD Claude Code CLI · in the page gitlab-ci-cd …oud's Agent Platform (GCP-native, Workload Identity Federation) 3. **Sandboxed execution**: Each interaction runs in a container with strict network and filesystem rules. Claude Code enforces workspa… Glossary Claude Code CLI · in the page glossary …d session](/docs/en/claude-code-on-the-web.md), which runs in a cloud sandbox. Learn more: [Remote Control](/docs/en/remote-control.md) ### Rules Modular instruction files in `.claude/rules/` that… Set up Claude Code (local mode) for a HIPAA-ready organization Claude Code CLI · in the page hipaa-setup …eanupPeriodDays": 30 } ``` For a fuller `managed-settings.json` with sandboxing, a network allowlist, credential protections, and local data retention, see `settings-hipaa.json` and `README-hipaa.md`… Hooks reference Claude Code CLI · in the page hooks …`/` or `\`, because Git Bash and Windows write paths differently. A [sandboxed](/docs/en/sandboxing.md) PowerShell command receives none of the variables. > [!NOTE] > > `CLAUDE_ENV_FILE` is availabl… Automate actions with hooks Claude Code CLI · in the page hooks-guide …| | `permission_prompt` | Claude needs you to approve a tool use or a sandboxed command's [network request](/docs/en/sandboxing.md#network-isolation), and the prompt has waited about six seconds | | `… Interactive mode Claude Code CLI · in the page interactive-mode …!` behavior Unless your session is one of those listed under [strict sandbox mode](/docs/en/sandboxing.md#turn-off-the-retry-with-strict-sandbox-mode), commands you type in shell mode run outside the… Customize keyboard shortcuts Claude Code CLI · in the page keybindings …s while the tab row has focus. In some dialogs, such as `/help` and `/sandbox`, the tab-switching keys also work from inside the tab's content. `Up` and `Down` move focus between the tab row and the… Legal and compliance Claude Code CLI · in the page legal-and-compliance …g or running Claude Code in your products or services (e.g. in hosted sandboxes or other agent infrastructure) requires agreeing to our [Commercial Terms of Service](https://www.anthropic.com/legal/co… Control MCP server access for your organization Claude Code CLI · in the page managed-mcp …decide-what-to-enforce): MCP restrictions alongside permission rules, sandboxing, and the other admin controls * [Connect Claude Code to tools via MCP](/docs/en/mcp.md): the full MCP reference, includ… Deploy managed settings Claude Code CLI · in the page managed-settings …ree/main/examples/settings) for a fuller `managed-settings.json` with sandboxing, a network allowlist, credential protections, and local data retention. For managed MCP servers, which you deploy alon… How Claude remembers your project Claude Code CLI · in the page memory …` | Personal project-specific preferences; add to `.gitignore` | Your sandbox URLs, preferred test data | Only you (current project) | CLAUDE.md and CLAUDE.local.md files in the directory hierarchy a… Monitoring Claude Code CLI · in the page monitoring-usage …nd`, `full_command`, `timeout`, `description`, and `dangerouslyDisableSandbox`, plus `git_commit_id` and `git_branch` when a `git commit` command succeeds. `git_commit_id` is the full commit SHA when… Enterprise network configuration Claude Code CLI · in the page network-config …laude Code process to start through a corporate launcher that applies sandboxing, network controls, or credential injection. The supervisor and its workers start Claude Code from a fixed path rather t… Choose a permission mode Claude Code CLI · in the page permission-modes …pt even in auto mode and `bypassPermissions` mode, and so does any [unsandboxed retry](/docs/en/sandboxing.md#the-unsandboxed-retry-escape-hatch) that needs approval to run outside the sandbox. Requir… Configure permissions Claude Code CLI · in the page permissions …and network enforcement that doesn't depend on the command text, use [sandboxing](/docs/en/sandboxing.md). To inspect the full command text with your own logic before it runs, use a [PreToolUse hook](… Test plugins with evals Claude Code CLI · in the page plugin-evals …context.scaffold_script`. The script runs as you, outside the agent's sandbox, and only when you pass `--scaffold`, so pass that flag only for suites you or your organization wrote. * **An earlier con… Add components to a plugin Claude Code CLI · in the page plugins/components …Shell tool](/docs/en/tools-reference.md#powershell-tool) outside the [sandbox](/docs/en/sandboxing.md) finds them on its `PATH` too, and a sandboxed PowerShell command doesn't. Add an executable scrip… Manage mods for your organization Claude Code CLI · in the page plugins/mods/admin …e Code with the permissions of the user who installed it. Mods aren't sandboxed. Through [managed settings](/docs/en/managed-settings.md), you decide whether mods run on your users' machines, which on… Mods overview Claude Code CLI · in the page plugins/mods/overview …Spend your usage**: call a model on your plan or API key Mods aren't sandboxed. If you turn on [sandboxing](/docs/en/sandboxing.md), the sandbox isolates the Bash commands Claude runs, and a process… Plugin security and trust Claude Code CLI · in the page plugins/security …-tool) gets those directories on its `PATH` when it runs outside the [sandbox](/docs/en/sandboxing.md), and not when it runs inside it. * **Skills, commands, and agents**: these enter Claude's context…