# agent-sandbox egress allowlist: one entry per line.
#   example.com        exactly this host
#   .example.com       the domain and every subdomain
#   example.com:22     also any other TCP port on this exact host
# Ports 80 and 443 are open for every entry.

# Claude Code (https://code.claude.com/docs/en/network-config)
api.anthropic.com
claude.ai
claude.com
platform.claude.com
sso.claude.com
mcp-proxy.anthropic.com
downloads.claude.ai
code.claude.com
http-intake.logs.us5.datadoghq.com
browser-intake-us5-datadoghq.com

# unkin
git.unkin.net
artifactapi.k8s.syd1.au.unkin.net
vault.service.consul:8200