Type: url
Original: https://docs.claude.com/en/docs/claude-code/sandboxing
Status: generated
Summary
Anthropic’s documentation for Claude Code’s sandboxed Bash tool, in which the operating system enforces user-defined filesystem and network boundaries on shell commands and their child processes so that most commands can run without per-command approval. It covers setup on macOS, Linux and WSL2, the auto-allow and regular permission modes, the unsandboxed retry escape hatch, filesystem and credential protection including credential masking, network isolation through a proxy, organization-wide enforcement, troubleshooting, and the sandbox’s security limitations.