{"name":"allowedDomains","slug":"alloweddomains","family":"setting","title":"Settings keys","noun":"settings key","description":"Set strictAllowlist to have the sandbox flat-out deny hosts outside your allowed domains instead of prompting.","description_source":"entry","described_by":{"version":"2.1.219","anchor":"new-sandbox-setting-network-strictallowlist"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.309","builds":0,"mined_builds":150,"first_cited":{"version":"2.1.113","released_at":"2026-04-17 19:09:22","spans":7}},"aliases":[],"entries":[{"version":"2.1.304","anchor":"sandbox-on-windows-now-computes-filesystem-grants-with-crede","heading":"Windows sandbox works out its file access from credentials and allowed domains","line":"On Windows, the sandbox now uses its credentials and allowed network domains when working out which files it may reach","released_at":"2026-10-19 19:47:15","reason":"found in this entry's text, named in this entry"},{"version":"2.1.285","anchor":"sandbox-settings-schema-grant-fields-reported-as-enforced","heading":"Sandbox status shown to host apps now describes the rules actually enforced","line":"The sandbox status that Claude Code reports to host apps now describes the enforced rules and gains a field for allowing all Unix sockets","released_at":"2026-09-29 17:32:09","reason":"found in this entry's text"},{"version":"2.1.284","anchor":"sandbox-network-proxy-gains-a-resolved-address-check-cloud","heading":"Sandbox blocks allowed websites that point to internal or cloud-metadata addresses","line":"The sandbox now checks where an allowed hostname really points and refuses loopback, link-local, cloud-metadata and similar internal addresses","released_at":"2026-09-28 17:11:59","reason":"found in this entry's text, named in this entry"},{"version":"2.1.283","anchor":"sandbox-network-and-filesystem-grants-are-withheld-when-a-re","heading":"One invalid sandbox deny entry now withholds the matching allow rules","line":"If one entry in deniedDomains, denyWrite or denyRead is invalid, Claude Code now withholds the matching allow list instead of applying it","released_at":"2026-09-25 18:46:11","reason":"found in this entry's text"},{"version":"2.1.268","anchor":"domain-pattern-validation-rejects-overly-broad-wildcards-for","heading":"Domain-pattern validation rejects overly-broad wildcards for allowedDomains\/deniedDomains","line":"Sandbox domain lists now reject overly broad wildcard patterns like *.com","released_at":"2026-09-10 18:41:11","reason":"found in this entry's text, named in this entry"},{"version":"2.1.232","anchor":"an-empty-alloweddomains-list-no-longer-produces-an-empty-egr","heading":"An empty allowedDomains list no longer produces an empty egress allowlist","line":"An empty allowedDomains list no longer produces an empty egress allowlist; you get a warning.","released_at":"2026-08-13 21:30:53","reason":"found in this entry's text"},{"version":"2.1.224","anchor":"sandbox-aws-credential-pairs-get-precedence-rules-and-scope-","heading":"Sandbox AWS credential pairs get precedence rules and scope warnings","line":"Conflicting AWS credential pairs in the sandbox now resolve predictably and warn about risky setups.","released_at":"2026-08-07 01:36:32","reason":"found in this entry's text"},{"version":"2.1.221","anchor":"sandbox-credentials-files-gains-a-mask-mode-with-regex-extra","heading":"sandbox.credentials.files gains a mask mode with regex extraction","line":"You can mask secrets in credential files so sandboxed commands see placeholders while real values are swapped in on egress.","released_at":"2026-08-03 22:16:25","reason":"found in this entry's text"},{"version":"2.1.219","anchor":"new-sandbox-setting-network-strictallowlist","heading":"New sandbox setting: network.strictAllowlist","line":"Set strictAllowlist to have the sandbox flat-out deny hosts outside your allowed domains instead of prompting.","released_at":"2026-07-24 16:11:49","reason":"named in this entry, found in this entry's text"},{"version":"2.1.186","anchor":"network-strictallowlist-setting","heading":"Network strictAllowlist Setting","line":null,"released_at":"2026-06-22 18:03:48","reason":"found in this entry's text"}],"entries_total":12,"docs":[{"source":"api","path":"cli-sdks-libraries\/libraries\/apple-foundation-models","title":"apple-foundation-models","documented":false},{"source":"api","path":"managed-agents\/environments","title":"environments","documented":false},{"source":"api","path":"managed-agents\/migration","title":"migration","documented":false},{"source":"api","path":"managed-agents\/secure-deployment","title":"secure-deployment","documented":false},{"source":"api","path":"managed-agents\/session-operations","title":"session-operations","documented":false},{"source":"api","path":"managed-agents\/tools-web-restrictions","title":"tools-web-restrictions","documented":false},{"source":"claude-code","path":"admin-setup","title":"Set up Claude Code for your organization","documented":false},{"source":"claude-code","path":"agent-sdk\/python","title":"Agent SDK reference - Python","documented":false},{"source":"claude-code","path":"claude-apps-gateway","title":"Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry","documented":false},{"source":"claude-code","path":"claude-apps-gateway-config","title":"Claude apps gateway configuration","documented":false}],"docs_total":12,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/alloweddomains","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}