claude-code - 💡(How to fix) Fix [BUG] CCR v2 network sandbox blocks MCP stdio server outbound calls — regression from CCR v1

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
RAW_BUFFERClick to expand / collapse

Preflight Checklist

  • I have searched existing issues and this hasn't been reported yet
  • This is a single bug report
  • I am using the latest version of Claude Code

What's Wrong?

After migration to CCR v2, MCP servers that make outbound HTTP calls (tavily-mcp, @upstash/context7-mcp) are completely broken. All external hosts except api.anthropic.com and registry.npmjs.org return "Host not in allowlist".

This worked in previous sessions on CCR v1. No config changes were made. Setting network egress to "All domains" in Settings → Capabilities has no effect.

Environment

  • Claude Code Version: 2.1.42
  • Entrypoint: remote_desktop (cloud web session)
  • CLAUDE_CODE_USE_CCR_V2: true
  • Runner: release-b5ac58d65-ext

Steps to Reproduce

  1. Configure tavily-mcp or any MCP server that makes outbound API calls in .mcp.json
  2. MCP server process starts successfully (npm registry is reachable)
  3. Any outbound call from the MCP server returns 403 host_not_allowed
  4. Setting "Allow network egress → All domains" in Settings → Capabilities has no effect

What Should Happen?

MCP stdio servers should be able to make outbound API calls. Previously this worked. If network sandboxing is intentional in CCR v2, the "Allow network egress" setting should actually override it — currently it does nothing.

Related Issues

  • #30112 (network egress allowlist not working in Cowork)

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING