Search the documentation
8 pages for sandbox.filesystem.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
Claude Code changelog
Claude Code CLI · in the page
changelog
…per key * Fixed sandboxed commands failing to start on Linux when `sandbox.filesystem.denyWrite` covers the working directory * Fixed forked background agents getting stuck "already resuming" for…
Deploy managed settings
Claude Code CLI · in the page
managed-settings
…ource keys include: * `sandbox.network.allowManagedDomainsOnly` and `sandbox.filesystem.allowManagedReadPathsOnly`: a `true` in any admin source turns the lock on. While a lock is on, Claude Code uni…
Configure permissions
Claude Code CLI · in the page
permissions
…ecision-making * Filesystem restrictions in the sandbox combine the [`sandbox.filesystem`](/docs/en/sandboxing) settings with Read and Edit deny rules; both are merged into the final sandbox boundary…
Configure the sandboxed Bash tool
Claude Code CLI · in the page
sandboxing
…, `terraform`, or `npm` need to write outside those directories, use `sandbox.filesystem.allowWrite` to grant access to specific paths: ```json theme={null} { "sandbox": { "enabled": true,…
Deploy self-hosted environments to production
Claude Code CLI · in the page
self-hosted-environments-deploy
…`Edit`, `Write`, or `NotebookEdit` rule in `permissions.allow`, or a `sandbox.filesystem.allowWrite` or `allowRead` entry * A non-empty `env` block * An operator-posture override such as `sandbox.…
Claude Code settings reference
Claude Code CLI · in the page
settings-reference
…| Sandbox settings | Any file | | [`sandbox.filesystem`](#sandbox-filesystem) | Control which paths [sandboxed](/d…
Week 30 · July 20–24, 2026
Claude Code CLI · in the page
whats-new/2026-w30
…<a href="/docs/docs/en/sandboxing#disable-filesystem-isolation"><code>sandbox.filesystem.disabled</code></a> setting skips filesystem isolation while keeping network egress control</div> <div>In a…
Code in Claude Desktop on 3P
Claude Documentation · in the page
third-party/claude-desktop/code
…| | `allowedWorkspaceFolders` | A filesystem sandbox (`sandbox.filesystem.allowRead` with `allowManagedReadPathsOnly`) scoped to your allowed roots. The roots are also passed as `additi…