What
Two new experimental sandbox network settings:
network.tlsTerminatelets the sandbox terminate HTTPS connections itself, making request and response bodies visible to request filtering and credential injection; anexcludeDomainsoption opts specific hosts (such as ones using certificate pinning) out of this.network.parentProxylets the sandbox's proxy route outbound traffic through an upstream HTTP proxy, falling back to theHTTP_PROXY,HTTPS_PROXY, andNO_PROXYenvironment variables if not explicitly set.
Credential masking now requires tlsTerminate to be turned on, unless you explicitly opt out with allowPlaintextInject (off by default).
Why
Terminating TLS in-process lets the sandbox actually inspect and mask credentials inside encrypted traffic instead of only seeing opaque bytes, but both features are marked experimental, so behavior may still change.
Names in the bundlenetwork.tlsTerminate
network.tlsTerminate
Configure server-managed settings modified, medium confidence
An approval for `sandbox.credentials` or `sandbox.network.tlsTerminate` also covers the [`sandbox.network.allowedDomains`](/docs/en/settings-reference#sandbox-network-alloweddomains) entries in those same delivered settings, because both s…see the edit
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Added since
A small documentation edit on Configure the sandboxed Bash tool touched a line naming network.tlsTerminate after this was published.
* **TLS termination**: the proxy substitutes the real value inside request contents, so it has to see them. Set [`network.tlsTerminate`](/docs/en/settings-reference#sandbox-network-tlsterminate) so the proxy terminates TLS itself. Without …sandboxing see the edit
Confirmed since
Anthropic's documentation has since written up network.tlsTerminate, on All settings.
| [`sandbox.network.tlsTerminate`](#sandbox-network-tlsterminate) | Have the [sandbox](/docs/en/sandboxing#network-isolation) proxy terminate TLS so it can read HTTPS requests | Sandbox settings | User or managed |settings-reference see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
network.tlsTerminate on Configure server-managed settings