{"name":"sandbox.network.allowLocalBinding","slug":"sandbox-network-allowlocalbinding","family":"setting","title":"Settings keys","noun":"settings key","description":"Let [sandboxed](\/docs\/en\/sandboxing) commands listen on network ports and connect to localhost on macOS","description_source":"docs","described_by":{"doc":"claude-code\/settings-reference","title":"All settings"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":{"version":"2.1.305","released_at":"2026-10-20 19:29:36","spans":1}},"aliases":[],"entries":[{"version":"2.1.305","anchor":"windows-sandbox-user-profile-read-grant-with-credential-sto","heading":"Windows sandbox set-up can let sandboxed commands read your user profile","line":"On Windows, sandbox set-up can let sandboxed commands read your user profile, except credential stores; skip with `--skip-profile-grant`","released_at":"2026-10-20 19:29:36","reason":"found in this entry's text"},{"version":"2.1.305","anchor":"windows-sandbox-prompt-now-depends-on-allowlocalbinding-and","heading":"Windows sandbox guidance now follows your localhost setting","line":"On Windows, what Claude is told about sandboxed localhost access and profile-folder reads now depends on `sandbox.network.allowLocalBinding`","released_at":"2026-10-20 19:29:36","reason":"named in this entry, found in this entry's text"},{"version":"2.1.305","anchor":"sandbox-refuses-commands-after-local-binding-setting-changes","heading":"Windows sandbox asks for a restart after the local binding setting changes","line":"On Windows, the sandbox now refuses commands and asks you to restart if it was set up with a different `sandbox.network.allowLocalBinding`","released_at":"2026-10-20 19:29:36","reason":"named in this entry, found in this entry's text"},{"version":"2.1.305","anchor":"windows-sandbox-allowlocalbinding-is-fixed-at-install-and-m","heading":"On Windows, the sandbox's local connection setting is fixed when the sandbox is installed","line":"On Windows, changing `sandbox.network.allowLocalBinding` now needs `\/sandbox install` and a restart, and Claude Code warns when they disagree","released_at":"2026-10-20 19:29:36","reason":"named in this entry, found in this entry's text"},{"version":"2.1.305","anchor":"sandbox-allownestedusernamespaces-and-windows-allowlocalbin","heading":"Two more sandbox settings now count as weakening the sandbox","line":"`allowNestedUserNamespaces` on Linux and other systems, and `sandbox.network.allowLocalBinding` on Windows, now count as weaker sandbox settings","released_at":"2026-10-20 19:29:36","reason":"found in this entry's text"},{"version":"2.1.305","anchor":"windows-sandbox-warnings-and-fix-hints-for-reinstall-and-lo","heading":"Windows sandbox now says how to fix setup and loopback mismatches","line":"On Windows, sandbox messages now point to `\/sandbox install` and warn when `sandbox.network.allowLocalBinding` changes during a session","released_at":"2026-10-20 19:29:36","reason":"found in this entry's text"},{"version":"2.1.305","anchor":"windows-sandbox-loopback-mode-change-message","heading":"Sandbox tells you to restart after a local network setting changes","line":"If `sandbox.network.allowLocalBinding` changes mid-session, sandboxed commands are refused with a message to restart Claude Code","released_at":"2026-10-20 19:29:36","reason":"named in this entry, found in this entry's text"},{"version":"2.1.286","anchor":"cloud-sandbox-refusal-reasons-expanded-seccomp-unavailable","heading":"More sandbox settings now block serving device tools remotely","line":"Claude Code now refuses to serve device tools when seccomp is unavailable or more sandbox-weakening settings are on","released_at":"2026-09-30 17:14:38","reason":"found in this entry's text"},{"version":"2.1.281","anchor":"sandbox-prompt-new-macos-guidance-for-local-port-binding-an","heading":"Sandbox prompt: new macOS guidance for local port binding and open\/osascript","line":"On macOS, Claude is now told how to recognise sandbox blocks on local ports and on open\/osascript, and what to offer the user instead","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text"}],"entries_total":9,"docs":[{"source":"claude-code","path":"settings-reference","title":"All settings","documented":true}],"docs_total":1,"gates":[],"related":[{"name":"sandbox.network","slug":"sandbox-network","description":"Control which hosts, ports, and sockets [sandboxed](\/docs\/en\/sandboxing#network-isolation) commands reach"},{"name":"sandbox.network.allowedDomains","slug":"sandbox-network-alloweddomains","description":"Pre-allow domains so [sandboxed](\/docs\/en\/sandboxing) commands don't prompt for them"},{"name":"sandbox.network.allowManagedDomainsOnly","slug":"sandbox-network-allowmanageddomainsonly","description":"Lock the network allowlist to [managed settings](\/docs\/en\/sandboxing#keep-developers-from-widening-the-policy)"},{"name":"sandbox.network.deniedDomains","slug":"sandbox-network-denieddomains","description":"Block domains for [sandboxed](\/docs\/en\/sandboxing) commands, even inside an allowed wildcard"},{"name":"sandbox.network.strictAllowlist","slug":"sandbox-network-strictallowlist","description":"Deny hosts outside the [allowlist](\/docs\/en\/sandboxing#network-isolation) instead of prompting"},{"name":"sandbox.network.tlsTerminate","slug":"sandbox-network-tlsterminate","description":"Have the [sandbox](\/docs\/en\/sandboxing#network-isolation) proxy terminate TLS so it can read HTTPS requests"}],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/sandbox-network-allowlocalbinding","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}