CLAUDE_CODE_SANDBOXED
Updated by Alex Sorokoletov
CLAUDE_CODE_SANDBOXED is a Claude Code environment variable: Indicates or enforces that Claude Code is running in a sandboxed environment. The v2.1.92 changelog[1] restored the apply-seccomp helper for Linux sandbox in both npm and native builds — this variable likely signals the sandbox state to internal subsystems, controlling whether file operations, network calls, and…. Added in v2.1.94 and still present in v2.1.294. It is not in the official reference.
| Status | Present in v2.1.294 |
|---|---|
| Added | Added in v2.1.94 |
| Category | Permissions and sandbox |
| Official docs | Not listed |
How to set it
For one session, export it in the shell that starts Claude Code:
export CLAUDE_CODE_SANDBOXED=<value>
claudeTo apply it to every session, add it to the env object of a settings file:
// ~/.claude/settings.json
{
"env": {
"CLAUDE_CODE_SANDBOXED": "<value>"
}
}Release notes that mention it
- Claude Code v2.1.94 — 5 New Environment Variables: Mantle Authentication, MCP Sandboxing, and Team Onboarding
- Claude Code Version Tracker: Undocumented Env Vars, Feature Gates & Models
Related variables
CLAUDE_CHROME_PERMISSION_MODE: Permission mode for Claude for Chrome.CLAUDE_CODE_AUTO_MODE_CLASSIFY_EDITS: Turns the classification pass on: every edit runs through the classifier before it touches disk.CLAUDE_CODE_AUTO_MODE_EDIT_REMOVAL: Governs whether Auto mode may delete content as part of an edit.CLAUDE_CODE_AUTO_MODE_EDIT_REMOVAL_CAP: Caps how much a single autonomous edit can remove before it's held for a human.CLAUDE_CODE_AUTO_MODE_EXTERNAL_PERMISSIONS: Hands permission decisions to an external policy engine instead of the built-in prompt.CLAUDE_CODE_AUTO_MODE_GIT_STATUS: Feeds the working tree's git status into the classifier's context.CLAUDE_CODE_AUTO_MODE_GIT_STATUS_LIMIT: Bounds how much of that status is included, so the classifier prompt doesn't balloon in large or messy repos.CLAUDE_CODE_AUTO_MODE_GIT_STATUS_UPLOADS: Controls whether git-status context is uploaded to the classification service.
Frequently asked questions
What does CLAUDE_CODE_SANDBOXED do?
Indicates or enforces that Claude Code is running in a sandboxed environment. The v2.1.92 changelog[1] restored the apply-seccomp helper for Linux sandbox in both npm and native builds — this variable likely signals the sandbox state to internal subsystems, controlling whether file operations, network calls, and…
Which Claude Code version has CLAUDE_CODE_SANDBOXED?
Added in v2.1.94 and still present in v2.1.294.
How do I set CLAUDE_CODE_SANDBOXED?
Export it before starting Claude Code (export CLAUDE_CODE_SANDBOXED=value), or add it to the "env" object in ~/.claude/settings.json to apply it to every session.
All variables, searchable: Claude Code environment variables.