Useful Automation/Brief
Claude Code v2.1.271 adds per-command allowed domains for sandboxed Bash, PowerShell, and Monitor
The release notes for Claude Code v2.1.271 include a change that lets each command in auto mode with sandboxing have its own allowed_domains, with other hosts refused. The notes are brief on configuration details.
BriefPublished 15 September 20261 min read1 linked source · 1 checked fact
In auto mode with sandboxing, Bash, PowerShell, and Monitor commands can now be assigned per-command allowed_domains. The hosts a command needs are reviewed with it and opened for it alone; other hosts are refused.
This changes a workflow step: instead of a blanket network policy, each command carries its own host allowlist. Operators will need to specify allowed domains per command, which could affect how scripts are written and reviewed.
Our view
This shifts network access control from a global setting to a per-command configuration, requiring operators to declare allowed hosts for each command in sandboxed auto mode.
What the reporting says: Per-command allowed_domains were added to Bash, PowerShell and Monitor in auto mode with sandboxing, where the hosts a command needs are reviewed with it and opened for it alone, and other hosts are refused.