Let Admins Name Which APIs You Can Reach — Claude Code v2.1.285 Puts the Agent's "Outbound Mouth" Behind a Permission List
Claude Code v2.1.285 adds allowedProviders to limit which API endpoints may be used, CLAUDE_CODE_DISABLE_WEB_FETCH to turn off WebFetch, and a sandbox that lower-level settings can't loosen. In the age of unattended operation, the controls for administrators to tighten the agent's "outbound mouth" a




