{"name":"HTTP_PROXY","slug":"http-proxy","family":"env","title":"Environment variables","noun":"environment variable","description":"Concurrent sandboxes now get unique proxy usernames instead of sharing one identity.","description_source":"entry","described_by":{"version":"2.1.224","anchor":"sandbox-proxy-credentials-are-unique-per-sandbox-instance"},"presence":{"first_seen":"2.1.138","removed_in":null,"in_current_build":true,"newest_mined":"2.1.308","builds":149,"mined_builds":149,"first_cited":{"version":"2.1.167","released_at":"2026-06-06 01:18:42","spans":1}},"aliases":[],"entries":[{"version":"2.1.283","anchor":"proxy-lookup-no-longer-uses-http-proxy-for-http-urls","heading":"One proxy lookup no longer reads HTTP_PROXY","line":"A proxy lookup now checks `HTTPS_PROXY`, then `ALL_PROXY`, then git's system proxy, and ignores `HTTP_PROXY` for every address","released_at":"2026-09-25 18:46:11","reason":"found in this entry's text, named in this entry"},{"version":"2.1.277","anchor":"gateway-egress-boundary-mode-outbound-traffic-can-defer-add","heading":"Gateway egress-boundary mode: outbound traffic can defer address checks to a forward proxy","line":"A new env var lets a gateway proxy handle outbound address safety checks itself instead of Claude Code","released_at":"2026-09-18 16:22:26","reason":"found in this entry's text"},{"version":"2.1.268","anchor":"experimental-in-process-tls-termination-and-upstream-parent","heading":"Experimental in-process TLS termination and upstream parent-proxy support added to sandbox network config","line":"Sandbox can now terminate HTTPS itself and route traffic through an upstream proxy, both experimental","released_at":"2026-09-10 18:41:11","reason":"found in this entry's text"},{"version":"2.1.257","anchor":"much-larger-list-of-environment-variables-scrubbed-from-mcp","heading":"Much larger list of environment variables scrubbed from MCP config expansion","line":"Many more credential-like variables, including proxy and registry tokens, are blanked when expanding MCP config references.","released_at":"2026-09-01 17:15:33","reason":"found in this entry's text"},{"version":"2.1.238","anchor":"self-hosted-runner-can-mint-a-proxy-authorization-header-per","heading":"Self-hosted runner can mint a Proxy-Authorization header per connection","line":"The self-hosted runner can generate a fresh proxy auth token for every outbound connection.","released_at":"2026-08-20 18:01:54","reason":"found in this entry's text"},{"version":"2.1.227","anchor":"enterprise-oidc-login-can-route-identity-provider-requests-t","heading":"Enterprise OIDC login can route identity provider requests through a proxy","line":"Enterprise OIDC logins can route identity provider requests through your configured HTTPS proxy.","released_at":"2026-08-10 20:56:57","reason":"named in this entry, found in this entry's text"},{"version":"2.1.224","anchor":"sandbox-proxy-credentials-are-unique-per-sandbox-instance","heading":"Sandbox proxy credentials are unique per sandbox instance","line":"Concurrent sandboxes now get unique proxy usernames instead of sharing one identity.","released_at":"2026-08-07 01:36:32","reason":"named in this entry, found in this entry's text"},{"version":"2.1.203","anchor":"proxy-url-validation-with-clear-error-messages","heading":"Proxy URL Validation with Clear Error Messages","line":null,"released_at":"2026-07-07 17:40:17","reason":"found in this entry's text"},{"version":"2.1.186","anchor":"proxy-authentication-support-socks","heading":"Proxy Authentication Support (SOCKS)","line":null,"released_at":"2026-06-22 18:03:48","reason":"found in this entry's text"},{"version":"2.1.167","anchor":"proxy-environment-variables-tracked-in-dedicated-set","heading":"Proxy environment variables tracked in dedicated set","line":null,"released_at":"2026-06-06 01:18:42","reason":"found in this entry's text"}],"entries_total":13,"docs":[{"source":"claude-code","path":"agent-sdk\/secure-deployment","title":"Securely deploying AI agents","documented":false},{"source":"claude-code","path":"claude-apps-gateway-config","title":"Claude apps gateway configuration","documented":false},{"source":"claude-code","path":"claude-apps-gateway-deploy","title":"Claude apps gateway deployment and operations","documented":false},{"source":"claude-code","path":"network-config","title":"Enterprise network configuration","documented":false},{"source":"claude-code","path":"sandboxing","title":"Configure the sandboxed Bash tool","documented":false},{"source":"claude-code","path":"self-hosted-environments-deploy","title":"Deploy self-hosted environments to production","documented":false},{"source":"claude-code","path":"self-hosted-environments-reference","title":"Self-hosted environments reference","documented":false},{"source":"claude-code","path":"third-party-integrations","title":"Enterprise deployment overview","documented":false},{"source":"claude-code","path":"troubleshoot-install","title":"Troubleshoot installation and login","documented":false},{"source":"claude-docs","path":"claude-science\/command-line-settings","title":"Command line settings","documented":false}],"docs_total":12,"gates":[],"related":[{"name":"HTTPLIB2_CA_CERTS","slug":"httplib2-ca-certs","description":"One of the CA bundle variables Claude Code's agent proxy manages. When the proxy is running outside its tool-scoped mode it sets `HTTPLIB2_CA_CERTS` to the relay CA bundle path in the environment it builds for subprocesses, and its login-shell profile exports it, set-if-absent; an existing value naming a readable file of at most 1 MiB has its certificates folded into the relay bundle."},{"name":"HTTPS_PROXY","slug":"https-proxy","description":"If a connection fails through your proxy, the error now names the proxy environment variable to check."}],"url":"https:\/\/changelogs.core-directive.com\/reference\/env\/http-proxy","family_url":"https:\/\/changelogs.core-directive.com\/reference\/env.json"}