# Claude Code sandbox and permission safety guide

> Set practical boundaries for filesystem access, commands, secrets, network calls, and high-risk actions.

- **Category:** Setup and safety
- **Updated:** 2026-07-15
- **Reading time:** 1 min
- **Canonical page:** https://cmdbrief.com/guides/claude-code-sandbox

## Permissions should match consequence

A read-only repository review and a production migration should not share the same authority. Start with the narrowest access that can complete the task. Expand only when a concrete blocked action is understood and the scope remains acceptable.

## Protect the irreversible seams

Credentials, production databases, package publication, git history rewrites, and broad deletion need explicit review. Never paste secrets into prompts or logs. Prefer dry runs, previews, backups, and commands limited to the named resource.

- Inspect proposed commands.
- Keep unrelated dirty files intact.
- Use environment-native secret loading.
- Verify external state after authorized writes.

## Review generated code as untrusted input

Passing tests reduce risk but do not prove security or product correctness. Read authentication, billing, data migration, and shell-script changes closely. The owner remains responsible for the shipped result.

## Questions

### Should I allow every command for convenience?

No. Approve capabilities in proportion to the task and review actions with destructive or external consequences.

## Primary sources

Provider terms and product behavior can change. Confirm plan, pricing, model, and permission details in the current official documentation.

- [Claude Code security](https://docs.anthropic.com/en/docs/claude-code/security)

## Keep reading

- Setup and safety: [How to run an MCP server without Docker](https://cmdbrief.com/guides/how-to-run-mcp-without-docker)
- Comparisons: [Claude Code GUI for Mac: the options compared (2026)](https://cmdbrief.com/guides/claude-code-gui-mac)
- Workflows: [How to manage multiple Claude Code sessions on a Mac (2026)](https://cmdbrief.com/guides/manage-multiple-claude-code-sessions)

---

Markdown mirror of https://cmdbrief.com/guides/claude-code-sandbox, generated at build time from the same data the HTML page renders. Machine-readable index: https://cmdbrief.com/llms.txt