{"version":"2.1.305","anchor":"tool-search-refusal-error-class-and-grant-outside-sandbox-he","canonical_anchor":"tool-search-refusal-error-class-and-grant-outside-sandbox-he","heading":"Tool search refusals and outside-sandbox grants are handled differently","tier":"internal","area":"Tool Search","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.305\/e\/tool-search-refusal-error-class-and-grant-outside-sandbox-he","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.305","markdown":"### Tool search refusals and outside-sandbox grants are handled differently\n\nClaude Code's handling of a refused tool search, with the message \"tool search refused\", and of grants outside the sandbox has changed\n\n**Unclear.** What a user sees when a tool search is refused, and how an outside-sandbox grant is given, is not stated.\n\n**What**\n\nClaude Code's handling of a refused tool search has changed. A refusal is reported with the message \"tool search refused\". Tool search is how Claude Code looks up tools that are not loaded up front. Claude Code also reads a value that grants access outside the sandbox, which is the restricted area commands normally run in.\n\n**Why**\n\nThis points to changes in how Claude Code handles a refused tool search and permission to work outside the sandbox.\n\n- Area: Tool Search\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 2\/5\n- Scope: individual\n- Heads-up: no"}