14 pages for sandbox.network.

Set up Claude Code for your organization Claude Code CLI · in the page admin-setup …em and network isolation with domain allowlists | `sandbox.enabled`, `sandbox.network.allowedDomains` | | [Managed policy CLAUDE.md](https://code.claude.com/docs/en/memory.md#deploy-organization-wide-… Claude apps gateway configuration Claude Code CLI · in the page claude-apps-gateway-config …intercept traffic, inject credentials, or weaken isolation, such as `sandbox.network.tlsTerminate` and the proxy port settings. [Security approval dialogs](https://code.claude.com/docs/en/server-mana… Message your other Claude Code sessions Claude Code CLI · in the page cross-session-messaging …com/docs/en/sandboxing.md) with the sandbox's Unix-socket settings, [`sandbox.network.allowAllUnixSockets` and `sandbox.network.allowUnixSockets`](https://code.claude.com/docs/en/settings-reference#sa… Deploy managed settings Claude Code CLI · in the page managed-settings …replaces the earlier one * **Lists**, such as `permissions.deny` or `sandbox.network.allowedDomains`: the two lists combine, with duplicates removed * **Nested blocks**, such as `env` or `sandbox`: t… Monitoring Claude Code CLI · in the page monitoring-usage …t of options, such as `permissions.defaultMode`, are exported as-is. `sandbox.network.httpProxyPort` and `sandbox.network.socksProxyPort` are exported as `"[REDACTED]"` * Every other string, such as… Configure server-managed settings Claude Code CLI · in the page server-managed-settings …te, or authenticate traffic, or that weaken the sandbox's isolation: `sandbox.network.tlsTerminate`, `sandbox.network.httpProxyPort`, `sandbox.network.socksProxyPort`, `sandbox.credentials`, `sandbox.… All settings Claude Code CLI · in the page settings-reference …hs a command is expected to probe | Sandbox settings | Any file | | [`sandbox.network`](#sandbox-network) | Control which hosts, ports, and sockets [sandboxed](https://code.claude.com/docs/en/sandboxi… Tools reference Claude Code CLI · in the page tools-reference …check the address the proxy finds. Claude Code also denies hosts in `sandbox.network.deniedDomains`, and when [`allowManagedDomainsOnly`](https://code.claude.com/docs/en/settings-reference#sandbox-ne… Admin controls Claude Documentation · in the page claude-science/admin-controls …, including the domains a deployed configuration file adds with its `[sandbox.network]` keys; those settings are kept and apply again when you turn the switch off. Domains the file denies stay denied.… Configuration file reference Claude Documentation · in the page claude-science/configuration-file-reference …as managed by your organization so a member cannot override it. The `[sandbox.network]` lists are additive instead: they add to the member-managed lists under **Settings** > **Network** and lock nothi… Use Claude Science on a corporate network Claude Documentation · in the page claude-science/corporate-networks …allow subdomains as well, add `*.pypi.org` and `*.anaconda.org` to `[sandbox.network] allowed_domains` in `config.toml`. When the organization manages the network allowlist, **Network** settings are… Manage Claude Science on devices Claude Documentation · in the page claude-science/manage-on-devices …l an update from inside Claude Science. | | `enabled = false` under `[sandbox.network]` | Blocks network access from the app's local code-execution sandbox. The similarly named `network_isolated` key… Network requirements Claude Documentation · in the page claude-science/network-requirements …administrator can also use the per-device configuration file, whose `[sandbox.network]` keys add allowed or denied domains, or disable sandbox networking entirely. An organization can instead manage… Security and data handling Claude Documentation · in the page government/security/security-and-data-handling …needs such a command to work can list the agent's socket path under `sandbox.network.allowUnixSockets` in their Claude Code settings file, which keeps the command inside the sandbox. Every sandboxed…