Sandboxing

Isolate Claude's tool access so a compromised session can't escape.

Sandboxing restricts what Claude Code can read, write, and reach from its shell. Learn how macOS Seatbelt, Linux bubblewrap, and Claude's allow/deny rules work together to contain a session.

All sandboxing questions (1)

How do I sandbox Claude Code so a compromised tool call cannot leak my SSH keys?

Enable Claude Code's built-in sandbox, which uses macOS Seatbelt or Linux bubblewrap to restrict filesystem writes to your project directory and block all network traffic except approved domains. Configure allowWrite, denyRead, and allowedDomains to define the exact boundary.