{"name":"dangerouslyDisableSandbox","slug":"dangerouslydisablesandbox","family":"setting","title":"Settings keys","noun":"settings key","description":"The MCP server you expose now validates tool arguments and aborts work when a client cancels.","description_source":"entry","described_by":{"version":"2.1.234","anchor":"built-in-mcp-server-gains-schema-validation-cancellation-and"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":{"version":"2.1.246","released_at":"2026-08-25 19:17:34","spans":5}},"aliases":[],"entries":[{"version":"2.1.307","anchor":"dangerouslydisablesandbox-override-now-also-converts-ask-res","heading":"More commands get the \"Run outside of the sandbox\" prompt","line":"When Claude asks to run a command outside the sandbox, a command that would have prompted you anyway now shows the \"Run outside of the sandbox\" prompt with its reason","released_at":"2026-10-21 20:47:18","reason":"named in this entry, found in this entry's text"},{"version":"2.1.305","anchor":"windows-sandbox-allowlocalbinding-is-fixed-at-install-and-m","heading":"On Windows, the sandbox's local connection setting is fixed when the sandbox is installed","line":"On Windows, changing `sandbox.network.allowLocalBinding` now needs `\/sandbox install` and a restart, and Claude Code warns when they disagree","released_at":"2026-10-20 19:29:36","reason":"found in this entry's text"},{"version":"2.1.305","anchor":"bash-ast-too-complex-path-sandbox-override-and-permission-f","heading":"Some commands too complex to analyse no longer always ask for permission","line":"Some shell commands too complex to analyse can now be allowed by your existing permission rules instead of always prompting","released_at":"2026-10-20 19:29:36","reason":"found in this entry's text"},{"version":"2.1.292","anchor":"write-toolagent-spawn-plugin-hooks-subagent-bash-restricti","heading":"Some callers can no longer turn off the sandbox or run commands in the background","line":"For a restricted kind of caller, shell commands that ask to skip the sandbox or run in the background are refused or forced off","released_at":"2026-10-06 17:10:31","reason":"found in this entry's text, named in this entry"},{"version":"2.1.284","anchor":"tool-schemas-can-hide-dangerouslydisablesandbox-when-unsandb","heading":"Claude is not offered the sandbox escape option when unsandboxed commands are disabled","line":"Where unsandboxed commands are disabled, the option to run a command outside the sandbox is removed from the Bash and PowerShell tools","released_at":"2026-09-28 17:11:59","reason":"found in this entry's text, named in this entry"},{"version":"2.1.284","anchor":"bash-schema-hides-dangerouslydisablesandbox-when-unsandboxed","heading":"Claude is no longer offered the sandbox bypass when it is disallowed","line":"When your sandbox settings disallow unsandboxed commands, Claude's Bash tool no longer includes the `dangerouslyDisableSandbox` option","released_at":"2026-09-28 17:11:59","reason":"found in this entry's text, named in this entry"},{"version":"2.1.281","anchor":"sandbox-prompt-new-macos-guidance-for-local-port-binding-an","heading":"Sandbox prompt: new macOS guidance for local port binding and open\/osascript","line":"On macOS, Claude is now told how to recognise sandbox blocks on local ports and on open\/osascript, and what to offer the user instead","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text"},{"version":"2.1.257","anchor":"bash-tool-permission-matcher-now-includes-more-deciding-fiel","heading":"Bash tool permission matcher now includes more deciding fields","line":"Bash remote execution lists which input fields decide whether an existing permission still covers a call.","released_at":"2026-09-01 17:15:33","reason":"found in this entry's text, named in this entry"},{"version":"2.1.246","anchor":"a-bash-call-using-dangerouslydisablesandbox-no-longer-blocks","heading":"A Bash call using dangerouslyDisableSandbox no longer blocks remote execution","line":"A Bash call using dangerouslyDisableSandbox can still run on a remote device instead of being forced local.","released_at":"2026-08-25 19:17:34","reason":"named in this entry, found in this entry's text"},{"version":"2.1.239","anchor":"tools-can-declare-whether-they-run-remotely-bash-is-the-firs","heading":"Tools can declare whether they run remotely; Bash is the first, and it is scaffolding","line":"Tools now say whether they can run on a remote device; Bash says yes but nothing ships.","released_at":"2026-08-21 17:18:54","reason":"found in this entry's text"}],"entries_total":12,"docs":[{"source":"claude-code","path":"agent-sdk\/python","title":"Agent SDK reference - Python","documented":false},{"source":"claude-code","path":"agent-sdk\/typescript","title":"Agent SDK reference - TypeScript","documented":false},{"source":"claude-code","path":"monitoring-usage","title":"Monitoring","documented":false},{"source":"claude-code","path":"sandboxing","title":"Configure the sandboxed Bash tool","documented":false},{"source":"claude-code","path":"settings","title":"Claude Code settings","documented":false},{"source":"claude-code","path":"settings-reference","title":"All settings","documented":false}],"docs_total":6,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/dangerouslydisablesandbox","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}