Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial
Home / Reference / Settings keys

sandbox.excludedCommands

setting never mined documented JSON

A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.

Name commands Claude Code can run outside the sandbox

Anthropic's own wording. Read off All settings, captured 2026-10-22.

First seen — never in a mined build
Last seen — never in a mined build
Builds0 / 149on this box, as of v2.1.308
Written about v2.0.24 first named in a changelog, 20 Oct 2025

In the changelogs

7

Releases whose published page names sandbox.excludedCommands.

  1. v2.1.300
    Read-only folder setting now describes enforcement over SSH

    The read-only folders setting's description no longer says SSH ignores it, and now lists where read-only is enforced and where it is not

    found in this entry's text

  2. v2.1.282
    Repositories can no longer exempt commands from a sandbox an admin has locked down

    When running commands outside the sandbox is forbidden, sandbox.excludedCommands entries in a project's own settings files are ignored

    found in this entry's text, named in this entry

  3. v2.1.282
    Settings schema now describes sandbox.excludedCommands

    The settings schema now explains that sandbox.excludedCommands is a convenience, not a security boundary, and that its patterns merge across sources

    found in this entry's text, named in this entry

  4. v2.1.282
    Excluding a command from the sandbox can now be refused under a strict setup

    When commands outside the sandbox are forbidden, excluding a command is saved to user settings or refused, not saved to local settings

    found in this entry's text, named in this entry

  5. v2.1.277
    New sandbox-escape detection heuristics for sandbox.excludedCommands

    New heuristics detect commands trying to escape the sandbox via the excludedCommands allowlist

    found in this entry's text, named in this entry

  6. v2.1.234
    Sandbox exclusion list stops being an escape hatch once unsandboxed commands are disabled

    Your sandbox exclusion list stops working as a bypass once unsandboxed commands are disabled.

    named in this entry, found in this entry's text

  7. v2.0.24
    Auto-Allow Bash Commands in Sandbox Mode

    found in this entry's text

First cited

2

The earliest release whose published evidence quoted sandbox.excludedCommands was v2.1.277, 18 Sep 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.

ReleaseDateThe span that was quoted
v2.1.27718 Sep 2026sandbox.excludedCommands exempts commands
v2.1.28224 Sep 2026[sandbox] excludedCommands restricted to trusted settings tiers: ignoring ${h} sandbox.excludedCommands entr${h === 1 ? "y" : "ies"} not set by managed, --settings, or user settings

Presence across releases

0

The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.

Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.

Feedback