55 pages for /sandbox.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
spawn.sh: called once per claimed work item
Claude Developer Platform · in the page
managed-agents/self-hosted-sandboxes
…Claude-Managed-Agents), [Cloudflare](https://developers.cloudflare.com/sandbox/claude-managed-agents/), [Daytona](https://www.daytona.io/docs/en/guides/claude/claude-managed-agents), [E2B](https://e2b…
Set up Claude Code for your organization
Claude Code CLI · in the page
admin-setup
…e allowed | [Permissions](/docs/en/permissions), [Sandboxing](/docs/en/sandboxing) | | [Set up usage visibility](#set-up-usage-visibility) | How you track spend and adoption | [Analytics](/docs/en/ana…
Use Claude Code features in the SDK
Claude Code CLI · in the page
agent-sdk/claude-code-features
…UDEAI_MCP_SERVERS=false` in `env` | | [`sandbox.credentials`](/docs/en/sandboxing#protect-credentials) `deny` entries and file `mask` entries in `~/.claude/settings.json` | When the [command sandbox](…
Intercept and control agent behavior with hooks
Claude Code CLI · in the page
agent-sdk/hooks
…run. To block Bash writes to a file where [the sandbox runs](/docs/en/sandboxing), see the sandbox configuration for [Python](/docs/en/agent-sdk/python#sandbox-configuration) or [TypeScript](/docs/en…
Agent SDK reference - Python
Claude Code CLI · in the page
agent-sdk/python
…d "config" in input_data.get("file_path", ""): safe_path = f"./sandbox/{input_data['file_path']}" return PermissionResultAllow( updated_input={**input_data, "file_path": sa…
Securely deploying AI agents
Claude Code CLI · in the page
agent-sdk/secure-deployment
…system and network access. See the [sandboxing documentation](/docs/en/sandboxing) for details. ## Security principles For deployments that require additional hardening beyond Claude Code's defaults…
Handle approvals and user input
Claude Code CLI · in the page
agent-sdk/user-input
…["command"] = input_data["command"].replace( "/tmp", "/tmp/sandbox" ) return PermissionResultAllow(updated_input=sandboxed_input) return PermissionResultAllow(updated_i…
Manage multiple agents with agent view
Claude Code CLI · in the page
agent-view
…n, or another prompt only you can answer, such as a [sandbox](/docs/en/sandboxing) prompt to allow a network host or an MCP server's [request for input](/docs/en/mcp#respond-to-mcp-elicitation-request…
Configure auto mode
Claude Code CLI · in the page
auto-mode-config
…uns, unless the command carries [per-command allowed domains](/docs/en/sandboxing#per-command-allowed-domains-in-auto-mode). Claude Code suspends only the broad rules that grant arbitrary code executi…
Best practices for Claude Code
Claude Code CLI · in the page
best-practices
…th `/permissions` and let sandboxed commands run without asking with `/sandbox`. Switch to Manual mode when you want to approve edits and commands yourself. With Claude Code v2.1.283 or later, auto m…
Claude Code changelog
Claude Code CLI · in the page
changelog
…pt you choose to share can reproduce a request exactly * Changed the `/sandbox` mode options to read "Sandbox commands" instead of "Sandbox BashTool" * Changed `PermissionRequest` hooks in Cowork clou…
Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry
Claude Code CLI · in the page
claude-apps-gateway
…or `name` and the mode. * **File entries with [`mode: mask`](/docs/en/sandboxing#mask-credential-files)**: forwarded sentinel-only, as a whole-file mask whose `injectHosts` is the empty list, so the…
Claude apps gateway configuration
Claude Code CLI · in the page
claude-apps-gateway-config
…ed-policy), Claude Desktop doesn't turn on the [Bash sandbox](/docs/en/sandboxing) in the Code tab * An OTLP endpoint that points at the gateway itself, and the signed-in user's identity attributes. T…
Commands
Claude Code CLI · in the page
commands
…| | `/sandbox` | Toggle [sandbox mode…
Let Claude use your computer from the CLI
Claude Code CLI · in the page
computer-use
…t boundary > [!WARNING] > > Unlike the [sandboxed Bash tool](/docs/en/sandboxing), computer use runs on your actual desktop with access to the apps you approve. Claude checks each action and flags po…
Message your other Claude Code sessions
Claude Code CLI · in the page
cross-session-messaging
…a Bash command can reach the socket from inside the [sandbox](/docs/en/sandboxing) with the sandbox's Unix-socket settings, [`sandbox.network.allowAllUnixSockets` and `sandbox.network.allowUnixSockets…
Debug your configuration
Claude Code CLI · in the page
debug-your-config
…se a [PreToolUse hook](/docs/en/hooks-guide) or the [sandbox](/docs/en/sandboxing) for a hard guarantee. | ## Related resources For full reference on each configuration surface, see the dedicated pa…
Desktop application
Claude Code CLI · in the page
desktop
…p working. > [!WARNING] > > Unlike the [sandboxed Bash tool](/docs/en/sandboxing), computer use runs on your actual desktop with access to whatever you approve. Claude checks each action and flags po…
Development containers
Claude Code CLI · in the page
devcontainer
…tials, settings, and session history * [Sandbox environments](/docs/en/sandbox-environments): compare dev containers with the built-in Bash sandbox, custom containers, and VMs * [Security model](/docs…
Feature availability
Claude Code CLI · in the page
feature-availability
…en/mcp) * [Checkpoints](/docs/en/checkpointing), [sandboxing](/docs/en/sandboxing), and [Workflows](/docs/en/workflows) * [OpenTelemetry metrics](/docs/en/monitoring-usage) and the [managed settings f…
Glossary
Claude Code CLI · in the page
glossary
…ermission rules](#permission-rule). Learn more: [Sandboxing](/docs/en/sandboxing) ### Session A conversation tied to your current directory, with its own independent [context window](#context-windo…
Set up Claude Code (local mode) for a HIPAA-ready organization
Claude Code CLI · in the page
hipaa-setup
…ee [permission rules](/docs/en/permissions) and the [sandbox](/docs/en/sandboxing). ## Manage local session data Claude Code (local mode) and Cowork (local mode) store session data on each developer…
Hooks reference
Claude Code CLI · in the page
hooks
…e Git Bash and Windows write paths differently. A [sandboxed](/docs/en/sandboxing) PowerShell command receives none of the variables. > [!NOTE] > > `CLAUDE_ENV_FILE` is available for SessionStart, [S…
Automate actions with hooks
Claude Code CLI · in the page
hooks-guide
…approve a tool use or a sandboxed command's [network request](/docs/en/sandboxing#network-isolation), and the prompt has waited about six seconds | | `idle_prompt` | Claude finished responding about 6…
Interactive mode
Claude Code CLI · in the page
interactive-mode
…ur session is one of those listed under [strict sandbox mode](/docs/en/sandboxing#turn-off-the-retry-with-strict-sandbox-mode), commands you type in shell mode run outside the [sandbox](/docs/en/sandb…
Customize keyboard shortcuts
Claude Code CLI · in the page
keybindings
…bs while the tab row has focus. In some dialogs, such as `/help` and `/sandbox`, the tab-switching keys also work from inside the tab's content. `Up` and `Down` move focus between the tab row and the…
Choose a permission mode
Claude Code CLI · in the page
permission-modes
…`bypassPermissions` mode, and so does any [unsandboxed retry](/docs/en/sandboxing#the-unsandboxed-retry-escape-hatch) that needs approval to run outside the sandbox. Requires Claude Code v2.1.257 or l…
Configure permissions
Claude Code CLI · in the page
permissions
…ent that doesn't depend on the command text, use [sandboxing](/docs/en/sandboxing). To inspect the full command text with your own logic before it runs, use a [PreToolUse hook](#extend-permissions-wit…
Test plugins with evals
Claude Code CLI · in the page
plugin-evals
…rm, every command runs under Claude Code's [OS-level sandbox](/docs/en/sandboxing). Writes are confined to the run's workspace, your home directory and Claude Code configuration are unreadable, and ne…
Add components to a plugin
Claude Code CLI · in the page
plugins/components
…ocs/en/tools-reference#powershell-tool) outside the [sandbox](/docs/en/sandboxing) finds them on its `PATH` too, and a sandboxed PowerShell command doesn't. Add an executable script: ```bash bin/hell…
Mods overview
Claude Code CLI · in the page
plugins/mods/overview
…r API key Mods aren't sandboxed. If you turn on [sandboxing](/docs/en/sandboxing), the sandbox isolates the Bash commands Claude runs, and a process that a mod starts runs outside it. With [managed…
Plugin security and trust
Claude Code CLI · in the page
plugins/security
…directories on its `PATH` when it runs outside the [sandbox](/docs/en/sandboxing), and not when it runs inside it. * **Skills, commands, and agents**: these enter Claude's context as instructions, so…
Continue local sessions from any device with Remote Control
Claude Code CLI · in the page
remote-control
…sandbox the sessions the server starts, turn on [sandboxing](/docs/en/sandboxing) in a settings file. To print the `remote-control` flags in your terminal, run `claude remote-control --help`. Before…
Choose a sandbox environment
Claude Code CLI · in the page
sandbox-environments
…you launch with `claude --cloud` | The [sandboxed Bash tool](/docs/en/sandboxing) is built into Claude Code and restricts Bash commands. Built-in file tools, MCP servers, and hooks still run directly…
Configure the sandboxed Bash tool
Claude Code CLI · in the page
sandboxing
…containers, and virtual machines, see [Sandbox environments](/docs/en/sandbox-environments) > * To reduce permission prompts for tools other than Bash, see [permission modes](/docs/en/permission-mode…
Security
Claude Code CLI · in the page
security
…sks in agentic systems: * **Sandboxed bash tool**: [Sandbox](/docs/en/sandboxing) bash commands with filesystem and network isolation, reducing permission prompts while maintaining security. Configur…
Configure server-managed settings
Claude Code CLI · in the page
server-managed-settings
…text, add a [`sandbox` block with `allowManagedDomainsOnly`](/docs/en/sandboxing#configure-the-sandbox-for-your-organization). ```json theme={null} { "permissions": { "deny": [ "Bash(cur…
Claude Code settings
Claude Code CLI · in the page
settings
…entry. A degraded `files` entry pins [`filesystem.disabled`](/docs/en/sandboxing#disable-filesystem-isolation) like an explicit `deny` entry, and the warning notes that its read block isn't enforced…
Example settings files
Claude Code CLI · in the page
settings-example
…[stops Claude Code from starting where the sandbox can't run](/docs/en/sandboxing#enforce-sandboxing-with-managed-settings) * `requiredMinimumVersion` sets a minimum Claude Code version * `cleanupPeri…
All settings
Claude Code CLI · in the page
settings-reference
…Any file | | [`sandbox`](#sandbox) | [Isolate Bash commands](/docs/en/sandboxing) from your filesystem and network on macOS, Linux, and WSL2 | Sandbox settings | Any file | | [`sandbox.allowAppleEven…
Advanced setup
Claude Code CLI · in the page
setup
…which features you need: | Option | Requires | [Sandboxing](/docs/en/sandboxing) | When to use | | - | - | - | - | | [Native Windows](#install-on-native-windows) | None; [Git for Windows](https://gi…
Create custom subagents
Claude Code CLI · in the page
sub-agents
…'s [permission checks](/docs/en/permissions) and [sandboxing](/docs/en/sandboxing). It isn't a substitute for [restricting what a subagent can reach](#control-subagent-capabilities). A report that re…
Tools reference
Claude Code CLI · in the page
tools-reference
…`WebFetch(domain:...)` rule, which the [sandbox also honors](/docs/en/sandboxing#network-isolation). WebFetch never reads the sandbox allowlist in return, so adding a domain to a sandbox or organizat…
Troubleshooting
Claude Code CLI · in the page
troubleshooting
…s such as `pbcopy` fail inside the sandbox When [sandboxing](/docs/en/sandboxing) is on, clipboard utilities such as `pbcopy`, `xclip`, and `wl-copy` can fail to reach the system clipboard from insid…
Use Claude Code in VS Code
Claude Code CLI · in the page
vs-code
…0 or later. * Select **Sandbox** in the Customize section, or type `/sandbox`, to see whether Claude's Bash commands run [sandboxed](/docs/en/sandboxing). You can switch the sandbox mode and add [ex…
Week 30 · July 20–24, 2026
Claude Code CLI · in the page
whats-new/2026-w30
…background subagents stopNew [`sandbox.filesystem.disabled`](/docs/en/sandboxing#disable-filesystem-isolation) setting skips filesystem isolation while keeping network egress controlIn auto mode, the…
Week 32 · August 3–7, 2026
Claude Code CLI · in the page
whats-new/2026-w32
…on+F` on Mac)Sandbox credential files accept [`mode: "mask"`](/docs/en/sandboxing#mask-credential-files) on Linux and WSL2, so sandboxed commands read a sentinel copy while the sandbox proxy substitut…
Orchestrate subagents at scale with dynamic workflows
Claude Code CLI · in the page
workflows
…ool calls receive the same permission checks and [sandboxing](/docs/en/sandboxing) as any other tool call in the session. If the run does what you wanted, you can [save it as a command](#save-the-wor…
Run parallel sessions with worktrees
Claude Code CLI · in the page
worktrees
…der your [permissions](/docs/en/permissions) and [sandboxing](/docs/en/sandboxing) settings. The checks apply to the repository you launched Claude Code from. They also cover the main checkout a link…
Security and data handling
Claude Documentation · in the page
government/security/security-and-data-handling
…escribed under [Set up Linux and WSL2](https://code.claude.com/docs/en/sandboxing#set-up-linux-and-wsl2) in the Claude Code documentation. If either package is missing, shell commands run outside the…