filesystem-isolation

How do I sandbox Claude Code so a compromised tool call cannot leak my SSH keys?

Enable Claude Code's built-in sandbox, which uses macOS Seatbelt or Linux bubblewrap to restrict filesystem writes to your project directory and block all network traffic except approved domains. Configure allowWrite, denyRead, and allowedDomains to define the exact boundary.