{"name":"CLAUDE_GATEWAY_PROXY_IS_EGRESS_BOUNDARY","slug":"claude-gateway-proxy-is-egress-boundary","family":"env","title":"Environment variables","noun":"environment variable","description":"A new env var lets a gateway proxy handle outbound address safety checks itself instead of Claude Code","description_source":"entry","described_by":{"version":"2.1.277","anchor":"gateway-egress-boundary-mode-outbound-traffic-can-defer-add"},"presence":{"first_seen":"2.1.277","removed_in":null,"in_current_build":true,"newest_mined":"2.1.319","builds":39,"mined_builds":159,"first_cited":{"version":"2.1.277","released_at":"2026-09-18 16:22:26","spans":2}},"aliases":[],"entries":[{"version":"2.1.277","anchor":"gateway-egress-boundary-mode-outbound-traffic-can-defer-add","heading":"Gateway egress-boundary mode: outbound traffic can defer address checks to a forward proxy","line":"A new env var lets a gateway proxy handle outbound address safety checks itself instead of Claude Code","released_at":"2026-09-18 16:22:26","reason":"found in this entry's text, named in this entry"},{"version":"2.1.277","anchor":"gateway-proxy-can-become-the-sole-egress-boundaryssrf-check","heading":"Gateway proxy can become the sole egress-boundary\/SSRF check","line":"OIDC sign-in requests now also route through the proxy when the gateway proxy is set as the sole egress boundary","released_at":"2026-09-18 16:22:26","reason":"found in this entry's text, named in this entry"}],"entries_total":2,"docs":[{"source":"claude-code","path":"claude-apps-gateway-config","title":"Claude apps gateway configuration","documented":false}],"docs_total":1,"gates":[],"related":[{"name":"CLAUDE_GATEWAY_ALLOW_LOOPBACK","slug":"claude-gateway-allow-loopback","description":"The gateway can authenticate callers with Anthropic-issued JWTs verified against a remote key endpoint."},{"name":"CLAUDE_GATEWAY_DRAIN_TIMEOUT_MS","slug":"claude-gateway-drain-timeout-ms","description":"claude gateway now shuts down gracefully on SIGTERM\/SIGINT instead of exiting abruptly"},{"name":"CLAUDE_GATEWAY_LOG_FORMAT","slug":"claude-gateway-log-format","description":"Setting CLAUDE_GATEWAY_LOG_FORMAT to json turns Claude Code gateway messages into structured error logs"},{"name":"CLAUDE_GATEWAY_LOG_LEVEL","slug":"claude-gateway-log-level","description":"Minimum level for the gateway's `[gateway]` log lines written to stderr: `debug`, `info`, `warn` or `error`, case-insensitive. Default `info`; an unset or unrecognised value uses `info`."}],"url":"https:\/\/changelogs.core-directive.com\/reference\/env\/claude-gateway-proxy-is-egress-boundary","family_url":"https:\/\/changelogs.core-directive.com\/reference\/env.json"}