claude-code - 💡(How to fix) Fix [BUG] Cowork Windows: WebFetch egress proxy blocks all domains regardless of "All domains" allowlist setting [1 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
anthropics/claude-code#48114Fetched 2026-04-15 06:32:47
View on GitHub
Comments
0
Participants
1
Timeline
3
Reactions
0
Author
Participants
Timeline (top)
labeled ×3

Error Message

Error Messages/Logs

Same error returned for every domain attempted, including vengapaging.com, fusioninvoice.com, xagle.com, torqueforks.com, and others. 7. Observe EGRESS_BLOCKED error regardless of allowlist setting

Code Example

{"error_type":"EGRESS_BLOCKED","domain":"en.wikipedia.org","message":"Access to en.wikipedia.org is blocked by the network egress proxy."}

Same error returned for every domain attempted, including vengapaging.com, fusioninvoice.com, xagle.com, torqueforks.com, and others.
RAW_BUFFERClick to expand / collapse

Preflight Checklist

  • I have searched existing issues and this hasn't been reported yet
  • This is a single bug report (please file separate reports for different bugs)
  • I am using the latest version of Claude Code

What's Wrong?

The WebFetch tool in Cowork returns EGRESS_BLOCKED for all domains, even when the Domain allowlist is set to "All domains" and the network egress toggle is enabled. The allowlist setting has no effect — every domain is blocked regardless.

Related macOS issue: #30861 — this appears to be the same underlying bug on Windows.

What Should Happen?

WebFetch should successfully retrieve content from any domain when the allowlist is set to "All domains." The egress proxy should respect the user's configured allowlist setting.

Error Messages/Logs

{"error_type":"EGRESS_BLOCKED","domain":"en.wikipedia.org","message":"Access to en.wikipedia.org is blocked by the network egress proxy."}

Same error returned for every domain attempted, including vengapaging.com, fusioninvoice.com, xagle.com, torqueforks.com, and others.

Steps to Reproduce

  1. Open Claude Cowork desktop app on Windows
  2. Go to Settings → Capabilities → Code execution and file creation
  3. Enable "Allow network egress" toggle
  4. Set Domain allowlist to "All domains" (UI confirms: "Claude can access all domains on the internet.")
  5. Start a Cowork session
  6. Ask Claude to use WebFetch on any URL (e.g. https://en.wikipedia.org/wiki/Wikipedia:Signs_of_AI_writing)
  7. Observe EGRESS_BLOCKED error regardless of allowlist setting

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

No response

Claude Code Version

Latest (Cowork desktop app, updated 2026-04-14 — exact version unknown, claude --version N/A in Cowork)

Platform

Other

Operating System

Windows

Terminal/Shell

Windows Terminal

Additional Information

This bug is in the Claude Cowork desktop app (Windows), not the Claude Code CLI. The "Terminal/Shell" and "Platform" fields above don't map cleanly to Cowork — Platform is "Other" and the terminal field is N/A.

Steps to reproduce:

  1. Open Cowork on Windows
  2. Settings → Capabilities → Code execution and file creation
  3. Enable "Allow network egress," set Domain allowlist to "All domains"
  4. In a Cowork session, use the WebFetch tool on any domain

The setting is confirmed correctly configured (screenshot attached in mind — "Claude can access all domains on the internet." shown in the UI). Despite this, every WebFetch call returns EGRESS_BLOCKED.

The macOS version of this bug is tracked in #30861. This confirms the issue is cross-platform.

extent analysis

TL;DR

The WebFetch tool in Claude Cowork on Windows returns EGRESS_BLOCKED for all domains despite the Domain allowlist being set to "All domains", suggesting a potential issue with the network egress proxy configuration.

Guidance

  • Verify that the "Allow network egress" toggle is enabled and the Domain allowlist is correctly set to "All domains" in the Cowork settings.
  • Check if the issue persists when trying to access different domains using WebFetch, to confirm it's not specific to certain URLs.
  • Compare the behavior with the macOS version, given that a similar issue is tracked in #30861, to see if there's a common root cause.
  • Consider testing an older version of the Cowork desktop app, if possible, to confirm if this is a regression and to identify when the issue started.

Example

No specific code snippet can be provided without more details on the WebFetch tool's implementation, but verifying the configuration and testing different scenarios can help narrow down the issue.

Notes

The exact version of the Claude Code Version is unknown, which might limit the ability to pinpoint the cause. The issue seems to be cross-platform, given the similar bug reported on macOS.

Recommendation

Apply workaround: Given the regression nature and the fact that it worked in a previous version, trying to identify and revert any recent changes related to network egress or the Domain allowlist might provide a temporary solution until a fix is available.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING