50 pages for isolation.

enterprise Claude Developer Platform · in the page agents-and-tools/agent-skills/enterprise …preadsheet mention, even when the user just wants to discuss data | | Isolation behavior | Does the Skill work correctly on its own? | Skill references fil… bash-tool Claude Developer Platform · in the page agents-and-tools/tool-use/bash-tool …h commands and operators your application allows. The real control is isolation: run the whole session inside a container or a virtual machine (see [Security](https://platform.claude.com/docs/en/agent… code-execution-tool Claude Developer Platform · in the page agents-and-tools/tool-use/code-execution-tool …nal connections:** No outbound network requests permitted * **Sandbox isolation:** Full isolation from host system and other containers * **File access:** Limited to workspace directory only * **Works… computer-use-tool Claude Developer Platform · in the page agents-and-tools/tool-use/computer-use-tool …command outputs) 4. Returns these results to Claude For security and isolation, the reference implementation runs all of this inside a Docker container with appropriate port mappings for viewing and… claude-platform-on-aws-iam-actions Claude Developer Platform · in the page api/claude-platform-on-aws-iam-actions …on that does not bind to a workspace ARN. See [Per-customer workspace isolation](https://platform.claude.com/docs/en/api/claude-platform-on-aws-iam-actions#per-customer-workspace-isolation) for the tw… Message Batches API Claude Developer Platform · in the page build-with-claude/batch-processing …ssing of other requests. ## Batch storage and privacy * **Workspace isolation**: Batches are isolated within the Workspace they are created in. They can only be accessed by API requests in that same… claude-platform-on-aws Claude Developer Platform · in the page build-with-claude/claude-platform-on-aws …on that does not bind to a workspace ARN. See [Per-customer workspace isolation](https://platform.claude.com/docs/en/api/claude-platform-on-aws-iam-actions#per-customer-workspace-isolation) for the tw… files Claude Developer Platform · in the page build-with-claude/files …cs/en/manage-claude/workspaces) for each tenant. The workspace is the isolation boundary for files, so a workspace per tenant gives each tenant's data hard isolation from every other tenant. Each orga… mid-conversation-effort-example Claude Developer Platform · in the page build-with-claude/mid-conversation-effort-example …run_subagent(model, prompt)) except Exception as error: # isolation boundary: one bad subagent should not end the run return f"(subagent failed: {type(error).__name__}: {erro… Request 2 caches its request content (not the response) Claude Developer Platform · in the page build-with-claude/prompt-caching …](https://platform.claude.com/docs/en/manage-claude/workspaces)-level isolation. Caches are isolated per workspace, ensuring data separation between workspaces within the same organization. This appli… skills-guide Claude Developer Platform · in the page build-with-claude/skills-guide …cs/en/manage-claude/workspaces) for each tenant. The workspace is the isolation boundary for custom Skills, so a workspace per tenant gives each tenant's Skills hard isolation from every other tenant.… workspaces Claude Developer Platform · in the page manage-claude/workspaces …affic with full rate limits and monitoring | ### Team or department isolation Assign workspaces to different teams for cost allocation and access control: * **Engineering team** with developer acc… spawn.sh: called once per claimed work item Claude Developer Platform · in the page managed-agents/self-hosted-sandboxes …pping. **Sandbox per session** If you need stronger isolation (a fresh filesystem, resource limits, or per-session network controls), run each session in its own sandbox. Build an im… self-hosted-sandboxes-security Claude Developer Platform · in the page managed-agents/self-hosted-sandboxes-security …cross all environments: session and work queue integrity, multitenant isolation, and agent-context minimization. When you self-host, the following responsibilities fall to you. ## What you own * **S… claude-fable-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-fable-5 …t that facilitates grooming, secrecy between an adult and a child, or isolation of a minor from trusted adults. - If Claude finds itself mentally reframing a request to make it appropriate, that refra… claude-fable-5-1 Claude Developer Platform · in the page release-notes/system-prompts/claude-fable-5-1 …t that facilitates grooming, secrecy between an adult and a child, or isolation of a minor from trusted adults. - If Claude finds itself mentally reframing a request to make it appropriate, that refra… claude-opus-4-7 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-4-7 …t that facilitates grooming, secrecy between an adult and a child, or isolation of a minor from trusted adults. - If Claude finds itself mentally reframing a request to make it appropriate, that refra… claude-opus-4-8 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-4-8 …t that facilitates grooming, secrecy between an adult and a child, or isolation of a minor from trusted adults. - If Claude finds itself mentally reframing a request to make it appropriate, that refra… claude-opus-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-5 …t that facilitates grooming, secrecy between an adult and a child, or isolation of a minor from trusted adults. - If Claude finds itself mentally reframing a request to make it appropriate, that refra… Set up Claude Code for your organization Claude Code CLI · in the page admin-setup …| OS-level filesystem and network isolation with domain allowlists… Use Claude Code features in the SDK Claude Code CLI · in the page agent-sdk/claude-code-features …<Warning> Do not rely on default `query()` options for multi-tenant isolation. Because the inputs above are read regardless of `settingSources`, an SDK process can pick up host-level configuration a… Configure your agent Claude Code CLI · in the page agent-sdk/configuration …Cookbook recipe that matches what you want to build * **[Multi-tenant isolation](/docs/en/agent-sdk/hosting#multi-tenant-isolation)**: isolate each tenant's settings and memory with `settingSources` /… Hosting the Agent SDK Claude Code CLI · in the page agent-sdk/hosting …ecture, session persistence, scaling, observability, and multi-tenant isolation for Docker, Kubernetes, and sandbox providers. The Agent SDK spawns and supervises a `claude` CLI subprocess that owns… Migrate to Claude Agent SDK Claude Code CLI · in the page agent-sdk/migration-guide …complete the migration. ## Breaking changes <Warning> To improve isolation and explicit configuration, Claude Agent SDK v0.1.0 introduces breaking changes for users migrating from Claude Code SDK… Agent SDK reference - Python Claude Code CLI · in the page agent-sdk/python …e subagent inheritance rules decide a subagent's permission mode "isolation": "worktree" | "remote" | None, # Isolation mode for the agent's changes } ``` Launches a new agent to handle complex,… Securely deploying AI agents Claude Code CLI · in the page agent-sdk/secure-deployment …nts > A guide to securing Claude Code and Agent SDK deployments with isolation, credential management, and network controls Claude Code and the Agent SDK can execute code, access files, and interact… Subagents in the SDK Claude Code CLI · in the page agent-sdk/subagents …tances, delegating work to them gives you four benefits: * **Context isolation**: each subagent runs in its own conversation, which starts fresh unless the subagent is a [fork](/docs/en/sub-agents#fo… Orchestrate teams of Claude Code sessions Claude Code CLI · in the page agent-teams …[fork](/docs/en/sub-agents#fork-the-current-conversation) or passes `isolation` on the call itself. Claude Code doesn't ask you to confirm the launch. Claude also names ordinary subagents on its own… Manage multiple agents with agent view Claude Code CLI · in the page agent-view …never to edit, run commands in, or enter that worktree, whatever the isolation setting. Where the copy starts depends on where the current session is running: * Like any dispatched session, the cop… Best practices for Claude Code Claude Code CLI · in the page best-practices …like `npm run lint` or `git commit` * **Sandboxing**: enable OS-level isolation that restricts filesystem and network access, allowing Claude to work more freely within defined boundaries Read more a… Claude Code changelog Claude Code CLI · in the page changelog …ns over-stating confinement: no unenforced path lists when filesystem isolation is off, and strict mode no longer claims commands can never run unsandboxed * Improved fullscreen mode: adding or remo… Claude apps gateway configuration Claude Code CLI · in the page claude-apps-gateway-config …andbox settings that intercept traffic, inject credentials, or weaken isolation, such as `sandbox.network.tlsTerminate` and the proxy port settings. [Security approval dialogs](/docs/en/server-managed… Use Claude Code in the cloud Claude Code CLI · in the page claude-code-on-the-web …pond automatically to CI failures and review comments * [Security and isolation](#security-and-isolation): how sessions are isolated * [Limitations](#limitations): rate limits and platform restriction… Explore the .claude directory Claude Code CLI · in the page claude-directory …via <C>--worktree</C>, the <C>EnterWorktree</C> tool, or subagent <C>isolation: worktree</C></>, description: <>Lists gitignored files to copy from your main repository into each new worktree… Configure cloud environments Claude Code CLI · in the page cloud-environments …relies on the same Anthropic-bound channel noted under [Security and isolation](/docs/en/claude-code-on-the-web#security-and-isolation). Turn off any connector you don't need to limit which tools Cla… Commands Claude Code CLI · in the page commands …ts it to create a worktree of its own before making code changes; the isolation instruction requires Claude Code v2.1.221 or later. To hand a side task to a subagent whose result comes back into this… Communications kit Claude Code CLI · in the page communications-kit …ict it with [sandbox `denyRead` rules](/docs/en/sandboxing#filesystem-isolation). [Permissions →](/docs/en/permissions) | | "How is this different from Copilot?" | Copilot autocompletes lines. Clau… Desktop application Claude Code CLI · in the page desktop …on > Get more out of Claude Code Desktop: parallel sessions with Git isolation, drag-and-drop pane layout, integrated terminal and file editor, side chats, computer use, Dispatch sessions from your p… Error reference Claude Code CLI · in the page errors …| [Background session errors](#command-blocked-by-the-worktree-isolation-checks) | | `too complex to verify that it stays inside the worktree`… Extend Claude Code Claude Code CLI · in the page features-overview …ext that returns summarized results | Context isolation, parallel tasks, specialized workers | Research task that… Glossary Claude Code CLI · in the page glossary …claude/rules/) ## S ### Sandboxing OS-level filesystem and network isolation for the Bash tool. Commands run inside a boundary you define upfront, so Claude can work freely within it without per-co… Hooks reference Claude Code CLI · in the page hooks …reeCreate` | When a worktree is being created via `--worktree`, `isolation: "worktree"`, or for a background session. Replaces default git behavior… Automate actions with hooks Claude Code CLI · in the page hooks-guide …r a sandboxed command's [network request](/docs/en/sandboxing#network-isolation), and the prompt has waited about six seconds… Set up Claude Code in a monorepo or large codebase Claude Code CLI · in the page large-codebases …ly package roots. This is particularly useful for [subagent worktree isolation](/docs/en/worktrees#isolate-subagents-with-worktrees). Subagents are parallel Claude instances spawned for subtasks, and… How Claude remembers your project Claude Code CLI · in the page memory …settings: `permissions.deny` | | Enforce sandbox isolation | Managed settings: `sandbox.enabled` | | Environment variables and API provi… Choose a permission mode Claude Code CLI · in the page permission-modes …ore an action, and the [Bash sandbox](/docs/en/sandboxing) and outer [isolation boundaries](/docs/en/sandbox-environments) decide what an action can reach once it runs. Each row below pairs a goal wit… Configure permissions Claude Code CLI · in the page permissions …| Agent calls that request the Opus model tier | | `Agent(isolation:worktree)` | Agent calls that request a git worktree | | `Bash(run_in_background:true)` | Bash calls that run in… Test plugins with evals Claude Code CLI · in the page plugin-evals …ion as `claude --plugin-dir`, so only evaluate plugins you trust. The isolation described in this section limits what the agent under test can reach; it isn't a boundary against the plugin's own code,… Plugins reference Claude Code CLI · in the page plugins-reference …`disallowedTools`, `skills`, `memory`, `background`, `omitClaudeMd`, `isolation`, `color`, and `experimental`. The only valid `isolation` value is `"worktree"`. * **Not supported, for security reasons… How Claude Code uses prompt caching Claude Code CLI · in the page prompt-caching …ork`](/docs/en/agent-view#copy-the-session-with-%2Ffork) receives its isolation instruction as a message at the end of the copied conversation, so the cache that the original conversation built stays…