305 pages for sandbox.

Connect BigQuery Claude Documentation · in the page claude-tag/admins/connections/bigquery …ccess token and injects it at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Connect a service that isn't in the list Claude Documentation · in the page claude-tag/admins/connections/custom …est with the credential at the boundary, so neither the model nor the sandbox holds the keys. Agent Proxy signs requests to hostnames in these forms: * `service.region.amazonaws.com` * S3 virtual-ho… Connect Datadog Claude Documentation · in the page claude-tag/admins/connections/datadog …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Connect GitLab Claude Documentation · in the page claude-tag/admins/connections/gitlab …-injected on every API request to your GitLab host. The model and the sandbox are not given the key; see [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Related r… Connect Gong Claude Documentation · in the page claude-tag/admins/connections/gong …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Connect Google Drive, Calendar, and Gmail Claude Documentation · in the page claude-tag/admins/connections/google …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Connect HubSpot Claude Documentation · in the page claude-tag/admins/connections/hubspot …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Connect Linear Claude Documentation · in the page claude-tag/admins/connections/linear …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Connect Notion Claude Documentation · in the page claude-tag/admins/connections/notion …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Connect PagerDuty Claude Documentation · in the page claude-tag/admins/connections/pagerduty …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Connect Salesforce Claude Documentation · in the page claude-tag/admins/connections/salesforce …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Connect Sentry Claude Documentation · in the page claude-tag/admins/connections/sentry …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Connect Snowflake Claude Documentation · in the page claude-tag/admins/connections/snowflake …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Connect Stripe Claude Documentation · in the page claude-tag/admins/connections/stripe …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Connect Vercel Claude Documentation · in the page claude-tag/admins/connections/vercel …oxy injects the credential at the network boundary; the model and the sandbox are not given the key. See [how Agent Proxy works](/docs/claude-tag/concepts/agent-identity.md#agent-proxy). ## Verify th… Customize Claude Tag Claude Documentation · in the page claude-tag/admins/customize …e the environment for a scope Claude runs every channel session in a sandbox that starts with a standard set of tools. When a channel's work needs something that sandbox doesn't have, such as a langu… Connect an authorization server Claude Documentation · in the page claude-tag/admins/federated-access/authorization-server …dy set up. ``` The exchange happens in Agent Proxy, outside Claude's sandbox, so neither the identity token nor your access token is visible to Claude, and Claude can't perform the exchange itself.… Connect an AWS role Claude Documentation · in the page claude-tag/admins/federated-access/aws …at the network boundary with the role's temporary credentials, so the sandbox never holds them. New threads pick up the connection on their own. In a thread already running, ask Claude to use AWS. If… Connect a gateway Claude Documentation · in the page claude-tag/admins/federated-access/connect-a-gateway …-proxy) attaches the token at the network boundary; the model and the sandbox are not given it. To disconnect a gateway, click **Remove** in the gateway's row of the **Gateways** table and confirm wi… Connect a Google Cloud identity Claude Documentation · in the page claude-tag/admins/federated-access/gcp …ing Google credential to each request at the network boundary, so the sandbox never holds it. New threads pick up the connection on their own. In a thread already running, ask Claude to use Google Cl… Federated agent access Claude Documentation · in the page claude-tag/admins/federated-access/overview …ization-server.md). ## How it works 1. When a request from Claude's sandbox needs one of your systems, [Agent Proxy](/docs/claude-tag/concepts/agent-identity.md#agent-proxy) matches it by destinatio… Identity token reference Claude Documentation · in the page claude-tag/admins/federated-access/token-reference …server until it expires, held only by Agent Proxy, never by Claude's sandbox. Claude reuses one token for a session's requests to the same gateway for about five minutes, half the token's lifetime,… Use Claude Tag at a healthcare organization Claude Documentation · in the page claude-tag/admins/healthcare …y and data handling](/docs/claude-tag/concepts/security-and-data.md): sandbox isolation, credential handling, and network egress * [Data lifecycle and deletion](/docs/claude-tag/concepts/data-lifecycl… Network requirements Claude Documentation · in the page claude-tag/admins/network-requirements …. In an Anthropic-hosted environment, every request from a channel's sandbox to your service passes through [Agent Proxy](/docs/claude-tag/concepts/agent-identity.md#agent-proxy), which carries HTTP… Restrict where Claude Tag operates Claude Documentation · in the page claude-tag/admins/restrict-access …only. * **An open-internet switch in Claude Tag settings.** A channel sandbox reaches only allowed hosts. To let Claude reach a public site or API, an Owner or a [Claude Tag admin](#delegate-claude-ta… How agent identity works Claude Documentation · in the page claude-tag/concepts/agent-identity …omething or a scheduled task starts. * The work Claude does runs in a sandbox, an isolated working environment built for the thread. * The agent's credentials for any additional Claude Tag connectors,… Data lifecycle and deletion Claude Documentation · in the page claude-tag/concepts/data-lifecycle …y and data handling](/docs/claude-tag/concepts/security-and-data.md): sandbox isolation, credential storage, and artifact visibility * [Manage workspaces and versions](/docs/claude-tag/admins/workspac… Claude Tag for Claude Code users Claude Documentation · in the page claude-tag/concepts/for-claude-code-users …e. When you tag `@Claude` in Slack with a task, a session starts in a sandbox that your organization configures, not on your machine. That sandbox is the same infrastructure that runs [Claude Code on… Glossary Claude Documentation · in the page claude-tag/concepts/glossary …njects credentials into Claude's outbound requests. The model and the sandbox are not given the key; Agent Proxy adds the credential at the network boundary when a request matches the rules an admin s… How Claude Tag works Claude Documentation · in the page claude-tag/concepts/how-it-works …works > Each Claude Tag thread in Slack runs a working session in a sandbox. See how progress shows in the thread, how to steer mid-task, what survives between turns, and how memory is scoped. > [!… Security and data handling Claude Documentation · in the page claude-tag/concepts/security-and-data …rity and data handling > How Claude Tag keeps credentials out of the sandbox, limits where a channel session's requests can go, and controls who can see artifacts and invoke Claude. > [!NOTE] > > Cl… Claude Tag settings map Claude Documentation · in the page claude-tag/concepts/settings-map …vers, and skills. Environments choose where its sessions run (a cloud sandbox, or a self-hosted sandbox on your own infrastructure), and scheduled deployments run it on a cron schedule. The two produ… Work with Claude Tag Claude Documentation · in the page claude-tag/overview …the message up. When Claude works on a task, it runs in an ephemeral sandbox, not on your computer. The sandbox is created when a conversation starts, holds any code or files Claude is working with,… Good habits for working with Claude Tag Claude Documentation · in the page claude-tag/users/good-habits …A `CLAUDE.md` carries setup as well as conventions. Sessions run in a sandbox with a standard set of preinstalled tools. If the repository needs more, such as a language runtime or a database client,… Prompt library Claude Documentation · in the page claude-tag/users/prompt-library …ag/users/good-habits.md#start-a-new-thread-for-a-new-task) in its own sandbox, so the tasks run at the same time and you can review each one on its own. To continue one existing discussion in a new th… Troubleshoot Claude Tag in channels and DMs Claude Documentation · in the page claude-tag/users/troubleshooting …e. **What it means** The machine running this thread's session, the sandbox Claude works in, stopped partway through a turn, so the step Claude was on may not have finished. The thread's conversatio… Work with your GitHub repositories Claude Documentation · in the page claude-tag/users/use-cases/work-with-github …that repository, from any channel. Each session runs in an isolated sandbox with a standard set of preinstalled tools. Two threads are two sessions with two separate sandboxes. If the repository nee… Enterprise Managed Auth for connectors Claude Documentation · in the page connectors/building/enterprise-managed-auth …you can do the following: * Walk the full flow end to end against a sandbox IdP, with every token shown decoded * Point it at your own MCP server or REST API to check resource metadata discovery, th… Design guidelines Claude Documentation · in the page connectors/building/mcp-apps/design-guidelines …e WebView, `WKWebView` on iOS and `WebView` on Android, rather than a sandboxed iframe. Apps on mobile have no camera, microphone, or location access, and users must add a connector on web or desktop… Get started with MCP Apps Claude Documentation · in the page connectors/building/mcp-apps/getting-started …ext-apps/api/interfaces/app.McpUiResourceMeta.html#domain) field, the sandbox origin your app is served from. For Claude, the value is the first 32 hex characters of the SHA-256 of your server URL, fo… Supersede older widget instances Claude Documentation · in the page connectors/building/mcp-apps/instance-supersession …laude serves all widget iframes from a single connector from the same sandbox origin on `*.claudemcpcontent.com`, and the iframe sandbox includes [`allow-same-origin`](https://developer.mozilla.org/do… Add an interactive UI to your MCP server Claude Documentation · in the page connectors/building/mcp-apps/quickstart …it reads that field, fetches the resource, and renders the HTML in a sandboxed frame. Make these edits to `server.mjs` in order. If you'd rather paste the whole file, it's in [The complete file](#th… Blend your MCP App with Claude's theme Claude Documentation · in the page connectors/building/mcp-apps/transparent-theming …onversation in light and dark mode. Claude renders MCP Apps inside a sandboxed iframe, and every frame between your widget and the chat surface already has a transparent background so the conversatio… Troubleshoot MCP Apps Claude Documentation · in the page connectors/building/mcp-apps/troubleshooting …exceeds approximately 150,000 characters and Claude's code execution sandbox is active, Claude writes the result to the sandbox filesystem instead of passing it inline to the conversation. Your app r… Changelog Claude Documentation · in the page cowork/changelog …rovalLifetimeDays` is one day or more. * Changed Chat's file-analysis sandbox (`chatAdvancedFileAnalysisEnabled`) to reach the hosts in `coworkEgressAllowedHosts`, for example to install packages. As… Set up Cowork (local mode) for a HIPAA-ready organization Claude Documentation · in the page cowork/hipaa-setup …ideloadFlags` | Claude Desktop passes no plugins to Cowork tasks | | `sandbox.enabled` with `sandbox.failIfUnavailable` | On Windows, Cowork tasks fail with [Sandbox required but unavailable](#sandbox… Claude for Government changelog Claude Documentation · in the page government/changelog …t is off is now told so on the sign-in page. * Added the "IPv6 in the sandbox" setting under Config > Access and models at the tenant, organization, and group levels, off by default: when it is on, Cl… Available settings Claude Documentation · in the page government/config/settings …op | | **Advanced file analysis in Chat** | Lets Claude run code in a sandbox for data analysis in Chat. Only takes effect where **Shell commands** and **Chat in Claude Desktop** are both on. Without… Connect Claude Code to Claude for Government Claude Documentation · in the page government/deploy-claude-code/configure …aude Desktop, `"merge"` layers Claude Desktop's own restrictions, its sandbox included, under them, as [Interaction with Claude Code's own managed settings](/docs/third-party/claude-desktop/code.md#in… Security and data handling Claude Documentation · in the page government/security/security-and-data-handling # Security and data handling > Answers for agency security review: sandbox isolation, network egress and required domains, approvals, connector credentials, telemetry, and where data is stored. > **…