14 pages for alloweddomains.

apple-foundation-models Claude Developer Platform · in the page cli-sdks-libraries/libraries/apple-foundation-models …deExecution, ] ) ``` `.webSearch` and `.webFetch` accept optional `allowedDomains`, `blockedDomains`, and `maxUses`. Server tool activity surfaces in the transcript as `ClaudeServerToolSegment` cus… tools Claude Developer Platform · in the page managed-agents/tools …tsWebSearchToolConfigParams { AllowedDomains = ["docs.example.com", "arxiv.org"], UserLocation = new() {… Set up Claude Code for your organization Claude Code CLI · in the page admin-setup …| `sandbox.enabled`, `sandbox.network.allowedDomains` | | [Managed policy CLAUDE.md]… Agent SDK reference - Python Claude Code CLI · in the page agent-sdk/python …theme={null} class SandboxNetworkConfig(TypedDict, total=False): allowedDomains: list[str] deniedDomains: list[str] allowManagedDomainsOnly: bool allowUnixSockets: list[str] allow… Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry Claude Code CLI · in the page claude-apps-gateway …ox": { "network": { "allowManagedDomainsOnly": true, "allowedDomains": ["github.com", "*.npmjs.org"] }, "filesystem": { "allowManagedReadPathsOnly": true, "denyRead… Claude apps gateway configuration Claude Code CLI · in the page claude-apps-gateway-config …ough `permissions.deny` * The egress allowlist, from `sandbox.network.allowedDomains`. If you set `coworkEgressAllowedHosts` in the policy's `desktop` block, the gateway uses that value instead of the… Deploy managed settings Claude Code CLI · in the page managed-settings …rlier one * **Lists**, such as `permissions.deny` or `sandbox.network.allowedDomains`: the two lists combine, with duplicates removed * **Nested blocks**, such as `env` or `sandbox`: the two blocks me… Configure permissions Claude Code CLI · in the page permissions …s combine `WebFetch(domain:...)` permission rules with the sandbox's `allowedDomains` and `deniedDomains` lists When you enable sandboxing and leave `autoAllowBashIfSandboxed` at its default of `true… Configure the sandboxed Bash tool Claude Code CLI · in the page sandboxing …"filesystem": { "disabled": true }, "network": { "allowedDomains": ["github.com", "*.npmjs.org"] } } } ``` The sandbox has two independent layers: [filesystem isolation](#fi… Claude Code settings Claude Code CLI · in the page settings …to the host filesystem, and network egress stays confined to `network.allowedDomains`. Only honored from user, managed, or CLI `--settings` settings. Default: false. Requires Claude Code v2.1.216 or l… Example settings files Claude Code CLI · in the page settings-example …"/tmp/build" ] }, "network": { "allowedDomains": [ "registry.npmjs.org", "*.example.com" ] } }, "plansDirect… Claude Code settings reference Claude Code CLI · in the page settings-reference …ngs | Any file | | [`sandbox.network.allowedDomains`](#sandbox-network-alloweddomains) | Pre-allow domains so [sandboxed](/docs/en/sandboxi… Tools reference Claude Code CLI · in the page tools-reference …andboxed command reach a domain without a prompt, add the domain to [`allowedDomains`](/docs/en/settings-reference#sandbox-network-alloweddomains) or allow it with a `WebFetch(domain:...)` rule, which… Week 16 · April 13–17, 2026 Claude Code CLI · in the page whats-new/2026-w16 …Domains</code> setting carves specific domains out of a broader <code>allowedDomains</code> wildcard</div> <div><code>/undo</code> is now an alias for <code>/rewind</code>, and <code>/proactive</c…