305 pages for sandbox.

Continue local sessions from any device with Remote Control Claude Code CLI · in the page remote-control …. | | `--verbose` | Show detailed connection and session logs. | | `--sandbox`, `--no-sandbox` | Removed in v2.1.300. If you pass either flag, the server [exits with an error](/docs/en/errors.md#sandb… Security Claude Code CLI · in the page security …### Built-in protections To mitigate risks in agentic systems: * **Sandboxed bash tool**: [Sandbox](/docs/en/sandboxing.md) bash commands with filesystem and network isolation, reducing permission… Self-hosted environments Claude Code CLI · in the page self-hosted-environments …ithout a signal, or with a grace period too short to drain, such as a sandbox lifetime cap or spot-instance reclamation, pass `--retire-at <epoch-seconds>` set to a few minutes before that time. At th… Customize sessions in self-hosted environments Claude Code CLI · in the page self-hosted-environments-configuration …ROJECT_DIR" # Hardening: this script runs outside Claude Code's Bash sandbox, so its git # calls skip some features that can start a program named in the checkout's # git settings. They don't skip th… Deploy self-hosted environments to production Claude Code CLI · in the page self-hosted-environments-deploy …`Edit`, `Write`, or `NotebookEdit` rule in `permissions.allow`, or a `sandbox.filesystem.allowWrite` or `allowRead` entry * A non-empty `env` block * An operator-posture override such as `sandbox.… Self-hosted environments reference Claude Code CLI · in the page self-hosted-environments-reference …own workspace, set environment variables, or override the operator's sandbox or hooks posture, such as `sandbox.enabled: false` or `disableAllHooks`. The default `warn` logs the violation and still s… Configure server-managed settings Claude Code CLI · in the page server-managed-settings …network enforcement that doesn't depend on the command text, add a [`sandbox` block with `allowManagedDomainsOnly`](/docs/en/sandboxing#configure-the-sandbox-for-your-organization). ```json theme={n… Claude Code settings Claude Code CLI · in the page settings …| | `sandbox.credentials` | An invalid entry in `files` or `envVars` that still has a valid `path` or `name` and a `mode` of `m… Example settings files Claude Code CLI · in the page settings-example …-r` run over the directory](/docs/en/permissions#read-and-edit); the `sandbox` block in this file closes that gap, because the sandbox [adds your `Read` deny paths](/docs/en/settings-reference#sandbox… All settings Claude Code CLI · in the page settings-reference …hell-mode-with-prefix) runs | Interface and terminal | Any file | | [`sandbox`](#sandbox) | [Isolate Bash commands](/docs/en/sandboxing.md) from your filesystem and network on macOS, Linux, and WSL2 |… Advanced setup Claude Code CLI · in the page setup …ects are located and which features you need: | Option | Requires | [Sandboxing](/docs/en/sandboxing.md) | When to use | | - | - | - | - | | [Native Windows](#install-on-native-windows) | None; [Git… Create custom subagents Claude Code CLI · in the page sub-agents …rough the session's [permission checks](/docs/en/permissions.md) and [sandboxing](/docs/en/sandboxing.md). It isn't a substitute for [restricting what a subagent can reach](#control-subagent-capabilit… Tools reference Claude Code CLI · in the page tools-reference …ss, including hostnames that resolve to one. It also denies hosts in `sandbox.network.deniedDomains`, and when [`allowManagedDomainsOnly`](/docs/en/settings-reference#sandbox-network-allowmanageddomai… Troubleshooting Claude Code CLI · in the page troubleshooting …ic renderer. ### Clipboard commands such as `pbcopy` fail inside the sandbox When [sandboxing](/docs/en/sandboxing.md) is on, clipboard utilities such as `pbcopy`, `xclip`, and `wl-copy` can fail to… Find bugs with ultrareview Claude Code CLI · in the page ultrareview …ew ultra`, Claude Code launches a fleet of reviewer agents in a cloud sandbox to find bugs in your branch or pull request. Compared to a local `/code-review`, ultrareview offers: * **Higher signal**… Use Claude Code in VS Code Claude Code CLI · in the page vs-code …server details. Requires Claude Code v2.1.280 or later. * Select **Sandbox** in the Customize section, or type `/sandbox`, to see whether Claude's Bash commands run [sandboxed](/docs/en/sandboxing.… Week 16 · April 13–17, 2026 Claude Code CLI · in the page whats-new/2026-w16 …nt Platform, and Microsoft Foundry users into 1-hour prompt cache TTL`sandbox.network.deniedDomains` setting carves specific domains out of a broader `allowedDomains` wildcard`/undo` is now an alias f… Week 25 · June 15–19, 2026 Claude Code CLI · in the page whats-new/2026-w25 …lected setting, and Esc now saves and closes instead of revertingNew `sandbox.allowAppleEvents` opt-in setting lets sandboxed commands send Apple Events on macOSPoint `CLAUDE_CLIENT_PRESENCE_FILE` at… Week 26 · June 22–26, 2026 Claude Code CLI · in the page whats-new/2026-w26 …ewind` can now resume a conversation from before `/clear` was runNew `sandbox.credentials` setting blocks sandboxed commands from reading credential files and secret environment variablesOrg-configure… Week 28 · July 6–10, 2026 Claude Code CLI · in the page whats-new/2026-w28 …same way it does with your local dev server previews. The browser is sandboxed and configurable: you choose whether browsing sessions persist, and safety classifiers review actions on external sites.… Week 30 · July 20–24, 2026 Claude Code CLI · in the page whats-new/2026-w30 …t, Claude can't start more and running background subagents stopNew [`sandbox.filesystem.disabled`](/docs/en/sandboxing#disable-filesystem-isolation) setting skips filesystem isolation while keeping n… Week 32 · August 3–7, 2026 Claude Code CLI · in the page whats-new/2026-w32 …it from the command menu or with `Ctrl+Alt+F` (`Ctrl+Option+F` on Mac)Sandbox credential files accept [`mode: "mask"`](/docs/en/sandboxing#mask-credential-files) on Linux and WSL2, so sandboxed comman… Week 35 · August 24–28, 2026 Claude Code CLI · in the page whats-new/2026-w35 … as any other tool call in the session. If the run does what you wanted, you can [save it as a… Run parallel sessions with worktrees Claude Code CLI · in the page worktrees …shell command under your [permissions](/docs/en/permissions.md) and [sandboxing](/docs/en/sandboxing.md) settings. The checks apply to the repository you launched Claude Code from. They also cover t… Admin controls Claude Documentation · in the page claude-science/admin-controls …de for a member, that code can reach only the domains on the analysis sandbox's network allowlist: the package hosts, the scientific databases behind the Featured connectors, and hosts the member appr… Auto mode Claude Documentation · in the page claude-science/auto-mode …cience is available only when all of these requirements are met: * **Sandbox**: the [sandbox](/docs/claude-science/core-concepts.md#sandbox) is on. With the sandbox off, auto mode approves nothing. *… Claude Science changelog Claude Documentation · in the page claude-science/changelog ….md#windows-signing-certificate) * Security hardening of the analysis sandbox on Mac, Windows, and Linux * Various bug fixes and security improvements **0.1.60** October 7, 2026 * Mac: fixed a prob… Cloud storage Claude Documentation · in the page claude-science/cloud-storage …t endpoint host separately. Listing a bucket adds its address to the sandbox network allowlist so code can reach it without a network permission card. Access within the bucket is still limited to the… Command line settings Claude Documentation · in the page claude-science/command-line-settings …ore than one. It does not change which sites Claude can reach. | | `--sandbox-port` `<n>` | port + 1 | The separate origin that previews of generated HTML are served from, so a previewed page cannot r… Configuration file reference Claude Documentation · in the page claude-science/configuration-file-reference …as managed by your organization so a member cannot override it. The `[sandbox.network]` lists are additive instead: they add to the member-managed lists under **Settings** > **Network** and lock nothi… Connectors and skills Claude Documentation · in the page claude-science/connectors-and-skills …ation manages the list of allowed sites, ask an admin to add it. See [Sandbox](/docs/claude-science/core-concepts.md#sandbox). * **Add one from the Connectors Directory.** Go to **Settings > Connector… Core concepts Claude Documentation · in the page claude-science/core-concepts …ear in the conversation and are marked complete as work finishes. ## Sandbox All code Claude writes runs inside an operating-system sandbox on your computer. The sandbox can read and write only the… Use Claude Science on a corporate network Claude Documentation · in the page claude-science/corporate-networks …ecks) traverse your outbound proxy and TLS inspection. * The analysis sandbox's connections (package hosts and research databases, when Claude runs code) are filtered by the app's own network allowlis… Custom connectors Claude Documentation · in the page claude-science/custom-connectors …s from developers you trust. Local-command connectors run inside the sandbox with the same network limits as Claude's code and a per-connector writable directory. Environment variables for local conn… Get started Claude Documentation · in the page claude-science/get-started …signed by Anthropic, PBC. On first launch, Claude Science sets up the sandbox and downloads its app window engine (about 150 MB) from `downloads.claude.ai` before the window appears, so the first star… Glossary Claude Documentation · in the page claude-science/glossary …uests to. **Network allowlist**: the list of every outside host that sandboxed code may reach, kept under Settings or, on Team and Enterprise plans, managed by your organization. **Permission card**… How Claude Science works with your data Claude Documentation · in the page claude-science/how-claude-science-works-with-your-data …nd the external services that local (Featured and custom) connectors, sandboxed code, and remote jobs call, directly from the computer or your own compute and without passing through Anthropic (see [A… Manage Claude Science on devices Claude Documentation · in the page claude-science/manage-on-devices …s launch logs and state to `%LOCALAPPDATA%\ClaudeScience` and keeps a sandbox state folder under `%LOCALAPPDATA%`, and it unpacks components it runs, such as the app window engine and the sandbox laun… Network requirements Claude Documentation · in the page claude-science/network-requirements …firewall allowlist: the app's connections to Anthropic, the analysis sandbox's package and research domains, the domains a package mirror adds and removes, and the built-in list of domains it always… Claude Science Claude Documentation · in the page claude-science/overview …plain language; Claude writes and runs Python, R, or shell code in a sandbox, reads the folders you grant it, pulls data from scientific databases through connectors, and saves results as versioned a… Remote compute clusters Claude Documentation · in the page claude-science/remote-compute-clusters …the scratch directory. > [!WARNING] > > Remote jobs run outside the sandbox, as your user on the host, with access to everything your account can read and write there. Default job timeout is 30 min… Run on a remote Linux server Claude Documentation · in the page claude-science/run-on-remote-linux-server …md#requirements). ## Install dependencies Claude runs code inside a sandbox, and the sandbox needs two system packages: bubblewrap and socat. Installing them takes administrator (`sudo`) access. Wit… Tools and environments Claude Documentation · in the page claude-science/tools-and-environments …or tools without a package, Claude downloads source, builds it in the sandbox with compilers from conda-forge, and saves the build as an artifact for reuse. The sandbox has no root access or system p… Give Claude access to your tools Claude Documentation · in the page claude-tag/admins/add-connections …re injected at the network boundary by Agent Proxy; the model and the sandbox are not given the key. A request to a host you haven't allowed is blocked, not sent. See [how Agent Proxy works](/docs/cla… Configure GitHub access Claude Documentation · in the page claude-tag/admins/configure-github …### Install project dependencies Every session runs in an isolated sandbox with a standard set of preinstalled tools. There are two places to add what a project needs beyond that set, such as a spe… Configure GitLab access Claude Documentation · in the page claude-tag/admins/configure-gitlab …d on every API request to your GitLab host. The model and the session sandbox never see it. ## Self-managed GitLab Self-managed GitLab instances are supported when reachable from the public internet… Connect Amplitude Claude Documentation · in the page claude-tag/admins/connections/amplitude …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Add the c… Connect Asana Claude Documentation · in the page claude-tag/admins/connections/asana …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Connect Jira and Confluence Claude Documentation · in the page claude-tag/admins/connections/atlassian …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). > [!NOTE] >…