Claude Managed Agents 新增自托管沙箱与 MCP 隧道

Starting today, Claude Managed Agents can operate in a sandbox you control and connect to your private Model Context Protocol (MCP) servers. Both the sandbox where an agent executes tools and the services it reaches run within the established boundaries of your enterprise, under your security and runtime controls.

The sandbox runs on your own infrastructure, or with managed providers like Cloudflare , Daytona , Modal , or Vercel to handle the compute and isolation for you.

On the Claude Platform, self-hosted sandboxes is available in public beta and MCP tunnels in research preview ( request access ).

Self-hosted sandboxes: keep agent execution within your perimeter

A self-hosted sandbox lets a Claude Managed Agent execute tools on infrastructure you control or with a managed sandbox provider. Code execution, sensitive files, packages, services, and data stay within your enterprise perimeter, under your security and runtime controls.

With self-hosted sandboxes, you keep sensitive files, packages, and services in your own infrastructure or with a managed sandbox provider. The agent loop that handles orchestration, context management, and error recovery stays on Anthropic’s infrastructure, while tool execution moves to your own configured environment.

Inside your perimeter, network policies, audit logging, and security tooling are already in place, and files and repositories don't leave. You also control the compute: resource sizing and the runtime image are set on your side, so agents running compute-heavy work such as long builds or image generation get the CPU, memory, and capacity the task needs.

Choose your sandbox client

Bring any sandbox client you want, or start with one of our supported providers:

Cloudflare runs sandboxes at scale using microVMs and lighter weight isolates. Outbound network requests are in your control with zero-trust secrets injection, customizable proxies to audit, reroute, or modify egress, and the ability to connect to internal services over Cloudflare's network. Amplitude is building Design Agent, an internal tool for on-brand production UI and marketing design, on Managed Agents and Cloudflare for tighter observability and control.

Daytona sandboxes are full composable computers, long-running and stateful. The same primitive runs a quick burst or an agent that works for hours. The sandbox stays accessible while a session runs over SSH or an authenticated preview URL, or can be paused and restored with full state preserved. Clay’s GTM engineering agent, Sculptor, builds, tests, and monitors workflows autonomously on Managed Agents and Daytona.

Modal is a cloud platform built for AI workloads, where sandboxes share the same foundation as Modal's functions, storage, and networking primitives, giving you everything you need to build production AI systems. Modal's custom container runtime delivers sub-second startup on any image, scales to hundreds of thousands of concurrent sandboxes, and gives you CPU and GPU resources on demand.

Vercel sandboxes combine VM security, VPC peering, and bring your own cloud with millisecond startup time. Managed Agents handles the model, tools, and session state, while the Vercel Sandbox firewall injects credentials at the network boundary so they never enter the sandbox. Rogo , an AI platform for institutional finance, is building an analyst agent on Managed Agents and Vercel Sandbox to handle their proprietary data securely.

MCP tunnels: Connect to services within your private network

MCP tunnels connect Claude Managed Agents to Model Context Protocol (MCP) servers inside your private network without exposing them to the public internet. Internal databases, private APIs, knowledge bases, and ticketing systems become tools your agents can call. A lightweight gateway you deploy makes a single outbound connection, no inbound firewall rules, no public endpoints, and traffic encrypted end to end.

MCP tunnels is supported in Managed Agents and the Messages API. MCP tunnels is managed from workspace settings within the Claude Console by organization admins.

“When building Sculptor, Clay's GTM engineering agent for building and testing GTM workflows autonomously, we wanted to give it a more flexible and powerful way to take actions than just tools in a loop. Claude Managed Agents let us replicate the power of a local agent with the reliability, versioning, and background execution of a cloud agent. And running it with our sandboxes, like Daytona, gives us control over the filesystem, so we can mount external file stores and install packages on the fly.”

“Claude Managed Agents handles the agent loop, Vercel's sandboxes give us an environment we can configure for our workloads. This gives us the option to leverage best-in-class infrastructure while we focus on what compounds for a financial AI platform: depth and breadth of tools and data, and a product surface built for how investors and bankers actually work.”

“Our use cases require secure orchestration of internal tools across a complex product surface. Modal's sandbox gives us the security boundary our enterprise customers need, and combining it with Claude Managed Agents gives us a powerful harness without hand-rolling extra complexity. We had a working version up in under a week, raising reliability for our customers.”

“Claude Managed Agents and Cloudflare let us get the first useful version of our design agent running in two days on infrastructure we already know and trust.”

“As we scale agentic commerce for local businesses, we need a highly efficient path to production with full harness control, scale, and reliability. We're excited to evaluate Claude Managed Agents for this next step, building on our Al infrastructure with Modal!”

Prev Prev 0 / 5 Next Next eBook

Getting started

Explore our docs to learn more, follow our cookbooks to set up your sandbox provider, or deploy your first agent in the Claude Console .

FAQ

Explore more product news and best practices for teams building with Claude.

Customize Claude Code with mods

Product announcements Customize Claude Code with mods Customize Claude Code with mods Customize Claude Code with mods Customize Claude Code with mods Sep 30, 2026 Claude for Government is now generally available

Product announcements Claude for Government is now generally available Claude for Government is now generally available Claude for Government is now generally available Claude for Government is now generally available Sep 25, 2026 Build plugins for Claude

Product announcements Build plugins for Claude Build plugins for Claude Build plugins for Claude Build plugins for Claude Sep 23, 2026 Claude Marketplace: one place to discover plugins, agents, and services from our partners

Product announcements Claude Marketplace: one place to discover plugins, agents, and services from our partners Claude Marketplace: one place to discover plugins, agents, and services from our partners Claude Marketplace: one place to discover plugins, agents, and services from our partners Claude Marketplace: one place to discover plugins, agents, and services from our partners Transform how your organization operates with Claude

Product updates, how-tos, community spotlights, and more. Delivered monthly to your inbox.

Homepage Homepage Next Next Thank you! Your submission has been received! Oops! Something went wrong while submitting the form. (function () { // ---------- Claude helper ---------- function buildClaudeUrl(text) { const url = new URL('https://claude.ai/new'); url.searchParams.set('q', text || ''); return url.toString(); }

// ---------- Auto-grow helpers ---------- function sizeTextarea(el) { // Ensure UA defaults don't force a starting height el.setAttribute('rows', el.getAttribute('data-min-rows') || '1'); el.style.minHeight = '0px'; el.style.height = 'auto'; // allow shrink el.style.height = el.scrollHeight + 'px'; // fit content }

function initAutogrow(root = document) { root.querySelectorAll('textarea[data-autogrow]').forEach((el) => { if (el.dataset.autogrowInit) return; el.dataset.autogrowInit = 'true';

// Respect your existing pattern for default text const preset = el.getAttribute('data-default-text'); if (preset != null && !el.value) el.value = preset;

// Initial sizing sizeTextarea(el);

// Resize as you type el.addEventListener('input', () => sizeTextarea(el));

// In case fonts/styles load late and change line-height window.addEventListener('load', () => sizeTextarea(el), { once: true }); }); }

// ---------- Claude form initializer ---------- function initClaudeForms(root = document) { root.querySelectorAll('form[data-claude-form]').forEach((form) => { if (form.dataset.claudeInit) return; form.dataset.claudeInit = 'true';

const textarea = form.querySelector('[data-claude-textarea], textarea'); const trigger = form.querySelector('[data-claude-button], button[type="button"], a[data-claude-button]');

if (!textarea || !trigger) { console.warn('Claude form: missing textarea or trigger in', form); return; }

// If the trigger is a but has no type, force "button" so it won't submit if (trigger.tagName === 'BUTTON' && !trigger.hasAttribute('type')) { trigger.type = 'button'; }

// Keep from navigating away while still opening Claude if (trigger.tagName === 'A') { trigger.addEventListener('click', (e) => e.preventDefault()); }

// Optional: support data-default-text on the textarea const preset = textarea.getAttribute('data-default-text'); if (preset != null && !textarea.value) textarea.value = preset;

// Click opens Claude; submission is optional trigger.addEventListener('click', () => { const text = (textarea.value || '').trim(); if (!text) { textarea.focus(); return; }

window.open(buildClaudeUrl(text), '_blank', 'noopener');

const mode = form.getAttribute('data-claude-mode') || 'intercept'; if (mode === 'also') { // Submit after opening Claude form.submit(); } // intercept mode: do nothing (no submit) });

// (Optional) Keep an href in sync for right-click/open-in-new-tab UX if (trigger.tagName === 'A') { const syncHref = () => trigger.setAttribute('href', buildClaudeUrl((textarea.value || '').trim())); syncHref(); textarea.addEventListener('input', syncHref); textarea.addEventListener('change', syncHref); } }); }

// ---------- Boot ---------- function initAll(root = document) { initAutogrow(root); initClaudeForms(root); }

if (document.readyState === 'loading') { document.addEventListener('DOMContentLoaded', () => initAll(), { once: true }); } else { initAll(); }

@Claude @Claude @Claude

Download app Download app Download app

Artifacts Artifacts Artifacts

Design Design Design

Connectors Connectors Connectors

Plugins Plugins Plugins

Skills Skills Skills

Claude in Chrome Claude in Chrome Claude in Chrome

Claude for Microsoft 365 Claude for Microsoft 365 Claude for Microsoft 365

AI agents AI agents AI agents

Code modernization Code modernization Code modernization

Coding Coding Coding

Commerce Commerce Commerce

Customer support Customer support Customer support

Cybersecurity Cybersecurity Cybersecurity

Legal Legal Legal

Sales Sales Sales

Financial services Financial services Financial services

Government Government Government

Healthcare Healthcare Healthcare

Higher education Higher education Higher education

K-12 teachers K-12 teachers K-12 teachers

Life sciences Life sciences Life sciences

Nonprofits Nonprofits Nonprofits

Small business Small business Small business

Scientists Scientists Scientists

Developer docs Developer docs Developer docs

Developer blog Developer blog Developer blog

Console Console Console

Engineering at Anthropic Engineering at Anthropic Engineering at Anthropic

Overview Overview Overview

Marketplace Marketplace Marketplace

Claude on AWS Claude on AWS Claude on AWS

Blog Blog Blog

Claude partner network Claude partner network Claude partner network

Customer stories Customer stories Customer stories

Service partners Service partners Service partners

Availability Availability Availability

Check files Check files Check files

Regional compliance Regional compliance Regional compliance

Report abuse Report abuse Report abuse

Security and compliance Security and compliance Security and compliance

Status Status Status

Support center Support center Support center

Anthropic Anthropic Anthropic

Anthropic news Anthropic news Anthropic news

Policy on the AI Exponential Policy on the AI Exponential Policy on the AI Exponential

Transparency Transparency Transparency

Privacy choices /* Dialog styling */ dialog#consent-container { margin: 0; padding: 8px; opacity: 0; transform: translateY(16px); transition: opacity 0.3s ease-out, transform 0.3s ease-out; }

dialog#consent-container.show { opacity: 1; transform: translateY(0); }

dialog#consent-container::backdrop { background: transparent; }

dialog button span { display: inline !important; }

/* Toggle switch styling */ .toggle_switch { position: relative; display: inline-block; width: 36px; height: 24px; }

.toggle_switch input { opacity: 0; width: 0; height: 0; }

.toggle_slider { position: absolute; cursor: pointer; top: 0; left: 0; right: 0; bottom: 0; background-color: #87867f; transition: .4s; border-radius: 24px; }

.toggle_slider:before { position: absolute; content: ""; height: 18px; width: 18px; left: 3px; bottom: 3px; background-color: white; transition: .4s; border-radius: 50%; }

input:checked + .toggle_slider { background-color: #d97757; }

input:checked + .toggle_slider:before { transform: translateX(12px); }

input:disabled + .toggle_slider { cursor: not-allowed; opacity: 0.5; }

@media only screen and (max-width: 501px) { dialog#consent-container { left: 8px !important; bottom: 8px !important; right: 8px !important; } #consent-banner { padding: 24px 16px 16px !important; } #simple-options { grid-template-columns: repeat(3, 1fr) !important; grid-template-rows: auto auto !important; } #customize-btn { grid-column: span 1 !important; } dialog button span { display: none !important; }

Cookie settings

Enables security and basic functionality.

Enables tracking of site performance.

Enables ads personalization and tracking.

Responsible disclosure policy Responsible disclosure policy Responsible disclosure policy

Usage policy Usage policy Usage policy

Claude Managed Agents 新增自托管沙箱与 MCP 隧道

推荐理由

主题

标签

正文