claude-code - 💡(How to fix) Fix [Bug] Domain allowlist not propagating to cowork-egress proxy after configuration update [1 comments, 2 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
anthropics/claude-code#46628Fetched 2026-04-12 13:37:15
View on GitHub
Comments
1
Participants
2
Timeline
6
Reactions
0
Author
Timeline (top)
labeled ×5commented ×1

Error Message

Persistent error: "Host '***.context-link.ai' is not on the network allowlist (cowork-egress-blocked)"

Code Example

[]
RAW_BUFFERClick to expand / collapse

Bug Description Domain allowlist propagation bug - cowork-egress proxy Description: Confirmed bug: Domains added in Settings → Capabilities don't propagate to the cowork-egress proxy. Technical details: Added domain: giy.context-link.ai Configuration present in ~/.claude/settings.json under sandbox.network.allowedDomains Persistent error: "Host '.context-link.ai' is not on the network allowlist (cowork-egress-blocked)" Only old domains (.fr, ***.com) appear in proxy allowlist Steps reproduced: Added domain in Settings → Capabilities Manually modified ~/.claude/settings.json Full restart of Claude Desktop and Claude Code Cleared caches cowork-egress proxy continues blocking the new domain Environment: Claude Desktop on macOS The Unix socket proxy appears to maintain its own list independently of user configuration.

Environment Info

  • Platform: darwin
  • Terminal: Apple_Terminal
  • Version: 2.1.85
  • Feedback ID: f22dcc99-9a8a-4e96-a50d-261f17d58aaf

Errors

[]

extent analysis

TL;DR

The cowork-egress proxy may not be properly updating its allowlist from the user configuration, causing newly added domains to be blocked.

Guidance

  • Verify that the ~/.claude/settings.json file is correctly formatted and contains the newly added domain (giy.context-link.ai) under sandbox.network.allowedDomains.
  • Check if there are any caching mechanisms or synchronization issues between the Claude Desktop application and the cowork-egress proxy that could be preventing the updated allowlist from being applied.
  • Investigate the possibility of the Unix socket proxy maintaining its own independent list of allowed domains, which may not be updated when changes are made to the user configuration.
  • Consider manually updating the cowork-egress proxy's allowlist or restarting the proxy service to see if it resolves the issue.

Example

No code snippet is provided as it is not clearly supported by the issue.

Notes

The issue may be related to a synchronization or caching problem between the Claude Desktop application and the cowork-egress proxy. Further investigation is needed to determine the root cause of the problem.

Recommendation

Apply workaround: Manually update the cowork-egress proxy's allowlist or restart the proxy service to see if it resolves the issue, as the root cause of the problem is not clearly identified.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING