/sandbox
A Claude Code slash command, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Toggle sandbox mode. Available on supported platforms only
Anthropic's own wording. Read off Commands, captured 2026-09-28.
In the changelogs
31Releases whose published page names /sandbox.
-
v2.1.307
New
claude sandbox uninstallcommand removes the Windows sandboxOn native Windows,
claude sandbox uninstallremoves the sandbox account, group, stored password and network filters, then lists what remainsfound in this entry's text
-
v2.1.307
Windows sandbox set-up now confirms the sandbox user can sign in
On Windows,
/sandbox installwaits up to 150 seconds for the sandbox user to sign in and reports logon problemsnamed in this entry, found in this entry's text
-
v2.1.305
Auto mode no longer gives the sandbox as a reason it is unavailable
The message saying auto mode works only inside the sandbox, and to pick a mode in
/sandbox, has been removedfound in this entry's text, named in this entry
-
v2.1.305
Windows sandbox set-up can let sandboxed commands read your user profile
On Windows, sandbox set-up can let sandboxed commands read your user profile, except credential stores; skip with
--skip-profile-grantfound in this entry's text, named in this entry
-
v2.1.305
Windows sandbox guidance now follows your localhost setting
On Windows, what Claude is told about sandboxed localhost access and profile-folder reads now depends on
sandbox.network.allowLocalBindingfound in this entry's text
-
v2.1.305
Remote users are told when unattended mode stops because the sandbox is off
A new message explains that unattended commands in a cloud session need the computer's sandbox, and how to turn it on
found in this entry's text
-
v2.1.305
On Windows, the sandbox's local connection setting is fixed when the sandbox is installed
On Windows, changing
sandbox.network.allowLocalBindingnow needs/sandbox installand a restart, and Claude Code warns when they disagreefound in this entry's text
-
v2.1.305
Windows sandbox now says how to fix setup and loopback mismatches
On Windows, sandbox messages now point to
/sandbox installand warn whensandbox.network.allowLocalBindingchanges during a sessionfound in this entry's text
-
v2.1.305
Short explanations and fixes for sandbox problems in cloud sessions
Claude Code now holds short descriptions and next-step hints for sandbox problems, pointing to
/sandboxandclaude apply-project-settingsfound in this entry's text
-
v2.1.299
Failed sandbox settings saves are no longer recorded as successful
When saving sandbox settings fails, Claude Code now records it as a failure instead of always recording success
found in this entry's text, named in this entry
-
v2.1.299
Claude Code gives Windows-specific advice when sandboxed commands fail
On Windows, the sandbox instructions now cover localhost limits, profile folder reads, certificate issues and placeholder files
found in this entry's text
-
v2.1.299
Windows sandbox setup adds a program-permission step to its error message
On Windows,
/sandboxsetup now runs a program-permission step first and includes its result when trusting the sandbox certificate failsfound in this entry's text, named in this entry
-
v2.1.299
/sandbox confirmation now reflects whether the setting was saved
After you pick a sandbox option in /sandbox, the confirmation now depends on how saving the setting went
found in this entry's text, named in this entry
-
v2.1.286
More sandbox settings now block serving device tools remotely
Claude Code now refuses to serve device tools when seccomp is unavailable or more sandbox-weakening settings are on
found in this entry's text
-
v2.1.282
Advice after a sandbox block can now mention changing sandbox settings
After the sandbox blocks a command, Claude may now tell you to use /sandbox to change the sandbox settings rather than to manage restrictions
found in this entry's text, named in this entry
-
v2.1.282
Sandbox failure advice now says to change sandbox settings in some setups
After a sandbox block, Claude is now sometimes told you can use /sandbox to change the sandbox settings rather than to manage restrictions
found in this entry's text, named in this entry
-
v2.1.281
Sandbox prompt: new macOS guidance for local port binding and open/osascript
On macOS, Claude is now told how to recognise sandbox blocks on local ports and on open/osascript, and what to offer the user instead
found in this entry's text
-
v2.1.280
New @internal SDK control requests for host-rendered dialogs
New internal SDK requests let a host app render /status, /export, /skills, Claude in Chrome, and /sandbox with its own UI
found in this entry's text
-
v2.1.260
/sandbox command now declares explicit requirements metadata
/sandbox now declares metadata marking it as interactive-only, no workspace required.
found in this entry's text, named in this entry
-
v2.1.227
Sandbox refusal now tells you how to turn sandboxing on
Sandbox refusals now hand you the exact setting to enable and point at /sandbox.
named in this entry, found in this entry's text
-
v2.1.221
/sandbox install provisions and trusts the managed TLS CA on Windows
On Windows, sandboxed HTTPS now works after /sandbox install without a manual certificate trust step.
named in this entry, found in this entry's text
-
v2.1.221
Windows sandbox install provisions a persistent TLS-inspection CA
On Windows, /sandbox install now sets up the certificate needed for sandboxed HTTPS, reporting partial success on failure.
named in this entry, found in this entry's text
-
v2.1.221
/sandbox install error classification by code, and a longer timeout
Windows sandbox install failures now report the real cause, and the timeout message correctly says two minutes.
named in this entry, found in this entry's text
-
v2.1.221
/sandbox reports whether the TLS inspection CA is trusted
The /sandbox status now shows whether the HTTPS inspection certificate is trusted and how to fix it.
named in this entry, found in this entry's text
-
v2.1.221
Windows sandbox TLS termination can now use the managed sandbox CA
Windows sandbox TLS interception could use a persistent managed certificate authority, but that path is disabled here.
named in this entry, found in this entry's text
-
v2.1.221
srt-win helper rewritten with async spawning, timeouts and typed errors
Windows sandbox setup no longer freezes the UI and reports specific failure reasons with timeouts.
named in this entry, found in this entry's text
- v2.1.212
-
v2.1.212
Windows Sandbox Installation
found in this entry's text
-
v2.1.78
Sandbox Unavailability Warnings
found in this entry's text
-
v2.0.34
Sandbox Override Configuration
found in this entry's text
-
v2.0.26
Better Sandbox Error Messages
found in this entry's text
First cited
2The earliest release whose published evidence quoted /sandbox was v2.1.227, 10 Aug 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the slash command does. All slash commands.