Brief
Claude Code v2.1.271 adds per-command domain allowlists for sandboxed commands
Anthropic released Claude Code v2.1.271, which adds per-command allowed_domains to Bash, PowerShell and Monitor in auto mode with sandboxing, among other changes.
The update introduces per-command allowed_domains for Bash, PowerShell and Monitor in auto mode with sandboxing. According to the release notes, the hosts a command needs are reviewed with it and opened for it alone; other hosts are refused. This means a command can be granted access only to the domains it requires, rather than broader network access. The release also adds fast mode in Claude Code Remote sessions, mouse support in the /config panel, and an omitClaudeMd option for subagents, but the per-command domain control is the most directly useful for tightening sandbox permissions.
Source details and supporting facts
Each line is stated by the page named above it.
Stated by github.com
- Added per-command allowed_domains to Bash, PowerShell and Monitor in auto mode with sandboxing: the hosts a command needs are reviewed with it and opened for it alone; other hosts are refused
- Added fast mode in Claude Code Remote sessions (cloud and self-hosted runners): the host's fast-mode setting or /fast typed in the session applies where your organization allows it
- Added omitClaudeMd to agent frontmatter and --agents JSON, letting custom and plugin subagents run without user, project and local CLAUDE.md files; managed policy files still load
- Added mouse support to the /config panel in fullscreen mode: the wheel scrolls the settings list, a click on a setting's value changes it, and the row under the pointer is highlighted
Sources
- Anthropic Claude Code release notes (GitHub)Text stored 15 September 2026
How this story was checked. Written from the 1 page listed above, stored 15 September 2026; claims checked against that stored text on 15 September 2026.
What that means
- 4 of 4 reported statements were confirmed against the page that carries them; the rest were removed rather than published.
- Figures in the text were required to appear in the stored source text: yes. Identifiers: yes.
- The check reads stored text only: no claim rests on a fresh look that did not happen.
- Where the reporting was silent, the text says so instead of filling the gap.