When WebFetch retrieves an artifact URL not already covered by an allow rule, Claude Code now checks artifact ownership. If the artifact belongs to someone else, or ownership can't be confirmed, the user is asked to confirm before the content enters the conversation; artifacts from another org are denied outright per OTHER_ORG_DENY.
Names in the bundleWebFetch
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Added since
A small documentation edit on Environment variables touched a line naming WebFetch after this was published.
| `CLAUDE_CODE_WEBFETCH_DEADLINE_MS` | Upper bound in milliseconds on how long [WebFetch](/docs/en/tools-reference#webfetch-tool-behavior) waits for a page to download, including any redirects it follows. A download that hasn't completed b…env-vars see the edit
Confirmed since
Anthropic's documentation has since written up WebFetch, on Archive Session.
- `BetaManagedAgentsWebFetchToolConfig object`api/beta/sessions/archive see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up WebFetch, on Archive Session.