39 pages for /sandbox.

spawn.sh: called once per claimed work item Claude Developer Platform · in the page managed-agents/self-hosted-sandboxes …Claude-Managed-Agents), [Cloudflare](https://developers.cloudflare.com/sandbox/claude-managed-agents/), [Daytona](https://www.daytona.io/docs/en/guides/claude/claude-managed-agents), [E2B](https://e2b… Set up Claude Code for your organization Claude Code CLI · in the page admin-setup …e allowed | [Permissions](/docs/en/permissions), [Sandboxing](/docs/en/sandboxing) | |… Use Claude Code features in the SDK Claude Code CLI · in the page agent-sdk/claude-code-features …RS=false` in `env` | | [`sandbox.credentials`](/docs/en/sandboxing#protect-credentials) `deny` entries and file `mask` entries in `~/.claude/settings.json` | When the [command sandbox](… Intercept and control agent behavior with hooks Claude Code CLI · in the page agent-sdk/hooks …ts Write tool calls and rewrites the `file_path` argument to prepend `/sandbox`, redirecting all file writes to a sandboxed directory. The callback returns `updatedInput` with the modified path and `p… Agent SDK reference - Python Claude Code CLI · in the page agent-sdk/python …d "config" in input_data.get("file_path", ""): safe_path = f"./sandbox/{input_data['file_path']}" return PermissionResultAllow( updated_input={**input_data, "file_path": sa… Securely deploying AI agents Claude Code CLI · in the page agent-sdk/secure-deployment …system and network access. See the [sandboxing documentation](/docs/en/sandboxing) for details. ## Security principles For deployments that require additional hardening beyond Claude Code's defaults… Handle approvals and user input Claude Code CLI · in the page agent-sdk/user-input …and"] = input_data["command"].replace( "/tmp", "/tmp/sandbox" ) return PermissionResultAllow(updated_input=sandboxed_input) return PermissionRes… Manage multiple agents with agent view Claude Code CLI · in the page agent-view …n, or another prompt only you can answer, such as a [sandbox](/docs/en/sandboxing) prompt to allow a network host or an MCP server's [request for input](/docs/en/mcp#respond-to-mcp-elicitation-request… Best practices for Claude Code Claude Code CLI · in the page best-practices …th `/permissions` and let sandboxed commands run without asking with `/sandbox`. Switch to Manual mode when you want to approve edits and commands yourself. </Tip> On Pro, Max, and Team plans, auto m… Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry Claude Code CLI · in the page claude-apps-gateway …or `name` and the mode. * **File entries with [`mode: mask`](/docs/en/sandboxing#mask-credential-files)**: forwarded sentinel-only, as a whole-file mask whose `injectHosts` is the empty list, so the… Commands Claude Code CLI · in the page commands …| | `/sandbox` | Toggle [sandbox mode](/docs/en/sand… Communications kit Claude Code CLI · in the page communications-kit …ithout prompting; restrict it with [sandbox `denyRead` rules](/docs/en/sandboxing#filesystem-isolation). [Permissions →](/docs/en/permissions) | | "How is this different from Copilot?" | Copilot au… Let Claude use your computer from the CLI Claude Code CLI · in the page computer-use …trust boundary <Warning> Unlike the [sandboxed Bash tool](/docs/en/sandboxing), computer use runs on your actual desktop with access to the apps you approve. Claude checks each action and flags po… Message your other Claude Code sessions Claude Code CLI · in the page cross-session-messaging …a Bash command can reach the socket from inside the [sandbox](/docs/en/sandboxing) with the sandbox's Unix-socket settings, [`sandbox.network.allowAllUnixSockets` and `sandbox.network.allowUnixSockets… Debug your configuration Claude Code CLI · in the page debug-your-config …se a [PreToolUse hook](/docs/en/hooks-guide) or the [sandbox](/docs/en/sandboxing) for a hard guarantee.… Desktop application Claude Code CLI · in the page desktop …ng permissions. <Warning> Unlike the [sandboxed Bash tool](/docs/en/sandboxing), computer use runs on your actual desktop with access to whatever you approve. Claude checks each action and flags po… Development containers Claude Code CLI · in the page devcontainer …tials, settings, and session history * [Sandbox environments](/docs/en/sandbox-environments): compare dev containers with the built-in Bash sandbox, custom containers, and VMs * [Security model](/docs… Feature availability Claude Code CLI · in the page feature-availability …en/mcp) * [Checkpoints](/docs/en/checkpointing), [sandboxing](/docs/en/sandboxing), and [Workflows](/docs/en/workflows) * [OpenTelemetry metrics](/docs/en/monitoring-usage) and the [managed settings f… Glossary Claude Code CLI · in the page glossary …ermission rules](#permission-rule). Learn more: [Sandboxing](/docs/en/sandboxing) ### Session A conversation tied to your current directory, with its own independent [context window](#context-windo… Hooks reference Claude Code CLI · in the page hooks …er could approve a Bash command running outside the [sandbox](/docs/en/sandboxing) without showing the prompt the hook requested; the classifier still applied its own safety rules to that command, and… Automate actions with hooks Claude Code CLI · in the page hooks-guide …approve a tool use or a sandboxed command's [network request](/docs/en/sandboxing#network-isolation), and the prompt has waited about six seconds… Choose a permission mode Claude Code CLI · in the page permission-modes …whether Claude asks before an action, and the [Bash sandbox](/docs/en/sandboxing) and outer [isolation boundaries](/docs/en/sandbox-environments) decide what an action can reach once it runs. Each ro… Configure permissions Claude Code CLI · in the page permissions …cks all processes from accessing a path, [enable the sandbox](/docs/en/sandboxing). </Warning> Read and Edit rules both use [gitignore](https://git-scm.com/docs/gitignore) pattern syntax with four di… Continue local sessions from any device with Remote Control Claude Code CLI · in the page remote-control …-sandbox` | Enable or disable [sandboxing](/docs/en/sandboxing) for filesystem and network isolation. Off by default.… Choose a sandbox environment Claude Code CLI · in the page sandbox-environments …ou launch from the web interface | The [sandboxed Bash tool](/docs/en/sandboxing) is built into Claude Code and restricts only Bash commands. Built-in file tools, MCP servers, and hooks still run dir… Configure the sandboxed Bash tool Claude Code CLI · in the page sandboxing …containers, and virtual machines, see [Sandbox environments](/docs/en/sandbox-environments). To reduce permission prompts for tools other than Bash, see [permission modes](/docs/en/permission-modes).… Security Claude Code CLI · in the page security …sks in agentic systems: * **Sandboxed bash tool**: [Sandbox](/docs/en/sandboxing) bash commands with filesystem and network isolation, reducing permission prompts while maintaining security. Configur… Claude Code settings Claude Code CLI · in the page settings …entry. A degraded `files` entry pins [`filesystem.disabled`](/docs/en/sandboxing#disable-filesystem-isolation) like an explicit `deny` entry, and the warning notes that its read block isn't enforced… Claude Code settings reference Claude Code CLI · in the page settings-reference …| [Isolate Bash commands](/docs/en/sandboxing) from your filesystem and network on macOS, Linux, and WSL2… Advanced setup Claude Code CLI · in the page setup …| [Sandboxing](/docs/en/sandboxing) | When to use | | -------------- | ----------------------------------------------… Create custom subagents Claude Code CLI · in the page sub-agents …'s [permission checks](/docs/en/permissions) and [sandboxing](/docs/en/sandboxing). It isn't a substitute for [restricting what a subagent can reach](#control-subagent-capabilities). <Note> Subagen… Tools reference Claude Code CLI · in the page tools-reference …l enforcement that covers every process, [enable the sandbox](/docs/en/sandboxing). ## EndConversation tool behavior The EndConversation tool ends the current session. Claude uses it only in two sit… Week 30 · July 20–24, 2026 Claude Code CLI · in the page whats-new/2026-w30 …ng background subagents stop</div> <div>New <a href="/docs/docs/en/sandboxing#disable-filesystem-isolation"><code>sandbox.filesystem.disabled</code></a> setting skips filesystem isolation while ke… Week 32 · August 3–7, 2026 Claude Code CLI · in the page whats-new/2026-w32 …</div> <div>Sandbox credential files accept <a href="/docs/docs/en/sandboxing#mask-credential-files"><code>mode: "mask"</code></a> on Linux and WSL2, so sandboxed commands read a sentinel copy whi… Orchestrate subagents at scale with dynamic workflows Claude Code CLI · in the page workflows …ool calls receive the same permission checks and [sandboxing](/docs/en/sandboxing) as any other tool call in the session. If the run does what you wanted, you can [save it as a command](#save-the-wor… Run parallel sessions with worktrees Claude Code CLI · in the page worktrees …e main repository's shared `.git` directory, and [sandboxing](/docs/en/sandboxing#filesystem-isolation) allows those writes, so commands such as `git commit` work from inside a worktree with the sandb… Security and data handling Claude Documentation · in the page government/security/security-and-data-handling …e. Commands that belong to Claude Code's terminal interface, such as `/sandbox`, are not part of Code sessions in the desktop application. See [how your configuration reaches Code sessions](/docs/thir… Code in Claude Desktop on 3P Claude Documentation · in the page third-party/claude-desktop/code …-reference) * [Claude Code sandboxing](https://code.claude.com/docs/en/sandboxing) * [Settings precedence](https://code.claude.com/docs/en/settings#settings-precedence) ## Disabling Code To turn off… SSH remote sessions in Claude Desktop on 3P Claude Documentation · in the page third-party/claude-desktop/ssh-remote-sessions …nstalled (see [Claude Code sandboxing](https://code.claude.com/docs/en/sandboxing)); without them, commands run unsandboxed and Claude Code shows a warning in the session. * `managedMcpServers`, as th…