sandbox.network.allowLocalBinding
A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Let sandboxed commands listen on network ports and connect to localhost on macOS
Anthropic's own wording. Read off All settings, captured 2026-10-22.
In the changelogs
9Releases whose published page names sandbox.network.allowLocalBinding.
-
v2.1.305
Windows sandbox set-up can let sandboxed commands read your user profile
On Windows, sandbox set-up can let sandboxed commands read your user profile, except credential stores; skip with
--skip-profile-grantfound in this entry's text
-
v2.1.305
Windows sandbox guidance now follows your localhost setting
On Windows, what Claude is told about sandboxed localhost access and profile-folder reads now depends on
sandbox.network.allowLocalBindingnamed in this entry, found in this entry's text
-
v2.1.305
Windows sandbox asks for a restart after the local binding setting changes
On Windows, the sandbox now refuses commands and asks you to restart if it was set up with a different
sandbox.network.allowLocalBindingnamed in this entry, found in this entry's text
-
v2.1.305
On Windows, the sandbox's local connection setting is fixed when the sandbox is installed
On Windows, changing
sandbox.network.allowLocalBindingnow needs/sandbox installand a restart, and Claude Code warns when they disagreenamed in this entry, found in this entry's text
-
v2.1.305
Two more sandbox settings now count as weakening the sandbox
allowNestedUserNamespaceson Linux and other systems, andsandbox.network.allowLocalBindingon Windows, now count as weaker sandbox settingsfound in this entry's text
-
v2.1.305
Windows sandbox now says how to fix setup and loopback mismatches
On Windows, sandbox messages now point to
/sandbox installand warn whensandbox.network.allowLocalBindingchanges during a sessionfound in this entry's text
-
v2.1.305
Sandbox tells you to restart after a local network setting changes
If
sandbox.network.allowLocalBindingchanges mid-session, sandboxed commands are refused with a message to restart Claude Codenamed in this entry, found in this entry's text
-
v2.1.286
More sandbox settings now block serving device tools remotely
Claude Code now refuses to serve device tools when seccomp is unavailable or more sandbox-weakening settings are on
found in this entry's text
-
v2.1.281
Sandbox prompt: new macOS guidance for local port binding and open/osascript
On macOS, Claude is now told how to recognise sandbox blocks on local ports and on open/osascript, and what to offer the user instead
found in this entry's text
First cited
1The earliest release whose published evidence quoted sandbox.network.allowLocalBinding was v2.1.305, 20 Oct 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.