{"version":"2.1.239","anchor":"agent-proxy-allowlist-narrowed-to-named-anthropic-hosts","canonical_anchor":"agent-proxy-allowlist-narrowed-to-named-anthropic-hosts","heading":"Agent proxy allowlist narrowed to named Anthropic hosts","tier":"notice","area":"Agent Proxy","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.239\/e\/agent-proxy-allowlist-narrowed-to-named-anthropic-hosts","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.239","markdown":"### Agent proxy allowlist narrowed to named Anthropic hosts\n\nThe agent proxy now allows only five named Anthropic hosts instead of any anthropic.com host.\n\n**What**\n\nThe agent proxy's default list of reachable hosts no longer contains a wildcard for anthropic.com. It now names only `api.anthropic.com`, `api-staging.anthropic.com`, `api-pr-preview.anthropic.com`, `mcp-proxy.anthropic.com` and `mcp-proxy-staging.anthropic.com`, plus the package registries. Any other host under anthropic.com is refused unless you allow it explicitly.\n\n**Details**\n\n- The removed entries were `anthropic.com`, `.anthropic.com` and `*.anthropic.com`.\n- This is the unconditional default list; no gate is involved.\n\n**Evidence**\n\n`mcp-proxy-staging.anthropic.com`\n\n- Area: Agent Proxy\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 3\/5"}