You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
HooksArea: what it touches
ImprovementsKind: in v2.1.323,
ImprovementsSection of the release
Unclear It is not stated whether this blocking always applies or only under certain settings or policies.
What
An HTTP hook is a step you configure that makes Claude Code send a web request at a certain moment. Claude Code already stopped these hooks from reaching private or local network addresses, and that check has changed:
Every address a hook's web address leads to is now checked, not just one.
Blocked requests fail with the error code ERR_HTTP_HOOK_BLOCKED_ADDRESS.
Cloud metadata addresses and some translated (NAT64) addresses appear to be covered too.
Loopback, meaning your own computer (127.0.0.1 and ::1), is still allowed.
Why
A hook pointed at a private or metadata address now gets blocked with an error that says why. Hooks aimed at a server on your own machine keep working for local development.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not stated whether this blocking always applies or only under certain settings or policies.
