A new boolean field in the network settings block makes the domain allowlist strictly enforced — hosts not in allowedDomains are denied without asking the user.
Details
- When
strictAllowlist: true, any outbound host not matched byallowedDomainsis immediately denied. Theaskcallback is never consulted. - Useful when
allowedDomainsis a policy control rather than a convenience hint, and you do not want Claude to prompt for unlisted hosts. - Complements the existing
deniedDomainslist.
Evidence
New strictAllowlist field in network settings schema (search for "If true, hosts not in allowedDomains are denied without consulting the ask callback.")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.