Anthropic is working on an option to run commands in a local sandbox for Claude Code desktop.

Runs commands from Claude Code in an isolated sandbox. Takes effect for new sessions.

A strict sandbox mode is available too.

Blocks commands that can’t run inside the sandbox (ssh, for example) instead of running them outside it or asking you. Applies to every Claude Code session on this computer, including the terminal, unless a project’s own settings override it.