{"name":"sandbox.network.allowedDomains","slug":"sandbox-network-alloweddomains","family":"setting","title":"Settings keys","noun":"settings key","description":"Pre-allow domains so [sandboxed](\/docs\/en\/sandboxing) commands don't prompt for them","description_source":"docs","described_by":{"doc":"claude-code\/settings-reference","title":"All settings"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.285","anchor":"sandbox-network-strictallowlist-admin-mandate-ignores-proj","heading":"Strict sandbox network allowlist now ignores domains allowed by a project","line":"Under `sandbox.network.strictAllowlist` or an admin mandate, websites allowed in project or local settings are no longer added","released_at":"2026-09-29 17:32:09","reason":"found in this entry's text"},{"version":"2.1.232","anchor":"two-silently-broken-gateway-configs-now-warn-at-boot","heading":"Two silently broken gateway configs now warn at boot","line":"Two gateway config shapes that used to fail invisibly now warn at boot.","released_at":"2026-08-13 21:30:53","reason":"found in this entry's text"},{"version":"2.1.232","anchor":"an-empty-alloweddomains-list-no-longer-produces-an-empty-egr","heading":"An empty allowedDomains list no longer produces an empty egress allowlist","line":"An empty allowedDomains list no longer produces an empty egress allowlist; you get a warning.","released_at":"2026-08-13 21:30:53","reason":"named in this entry, found in this entry's text"}],"entries_total":3,"docs":[{"source":"claude-code","path":"settings-reference","title":"All settings","documented":true},{"source":"claude-code","path":"admin-setup","title":"Set up Claude Code for your organization","documented":false},{"source":"claude-code","path":"claude-apps-gateway-config","title":"Claude apps gateway configuration","documented":false},{"source":"claude-code","path":"managed-settings","title":"Deploy managed settings","documented":false},{"source":"claude-code","path":"monitoring-usage","title":"Monitoring","documented":false},{"source":"claude-code","path":"server-managed-settings","title":"Configure server-managed settings","documented":false}],"docs_total":6,"gates":[],"related":[{"name":"sandbox.network","slug":"sandbox-network","description":"Control which hosts, ports, and sockets [sandboxed](\/docs\/en\/sandboxing#network-isolation) commands reach"},{"name":"sandbox.network.allowLocalBinding","slug":"sandbox-network-allowlocalbinding","description":"Let [sandboxed](\/docs\/en\/sandboxing) commands listen on network ports and connect to localhost on macOS"},{"name":"sandbox.network.allowManagedDomainsOnly","slug":"sandbox-network-allowmanageddomainsonly","description":"Lock the network allowlist to [managed settings](\/docs\/en\/sandboxing#keep-developers-from-widening-the-policy)"},{"name":"sandbox.network.deniedDomains","slug":"sandbox-network-denieddomains","description":"Block domains for [sandboxed](\/docs\/en\/sandboxing) commands, even inside an allowed wildcard"},{"name":"sandbox.network.strictAllowlist","slug":"sandbox-network-strictallowlist","description":"Deny hosts outside the [allowlist](\/docs\/en\/sandboxing#network-isolation) instead of prompting"},{"name":"sandbox.network.tlsTerminate","slug":"sandbox-network-tlsterminate","description":"Have the [sandbox](\/docs\/en\/sandboxing#network-isolation) proxy terminate TLS so it can read HTTPS requests"}],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/sandbox-network-alloweddomains","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}