Network access policy
Choose how much outbound network access the Coding Agent's cloud environment gets, from a built-in allowlist to a custom domain list.
The Coding Agent runs in an isolated cloud environment when it works on a task. The network access policy controls how much of the outside internet that environment can reach while it runs, for example to install dependencies or call an external API.
Who can set it and where
This is a company-wide setting. Company admins set it from the Cloud Environment settings page. The policy you pick applies to every cloud agent run in your company.
The three modes
Trusted
The agent can reach a built-in allowlist of common, well-known services (package registries and similar) that most tasks need. Anything outside that list is blocked. This is the safest default and works for the majority of tasks.
Full
The agent gets unrestricted outbound network access. Choosing Full also enables web search and fetch, so Andy can look things up and pull in pages from the open web while it works.
Custom
You provide your own list of allowed domains. The agent can reach the domains you list and nothing else. Use this when your tasks need a specific internal or third-party service that isn't on the Trusted allowlist, without opening up the whole internet.
Full removes outbound network restrictions entirely. Anything the agent or the code it runs can reach over the network becomes reachable, including arbitrary external endpoints. Prefer Trusted or Custom unless you specifically need open web access, and review the change with whoever owns security at your company first.
Choosing a mode
- Start with Trusted. It covers most tasks and keeps the blast radius small.
- Move to Custom when a task needs one or two specific domains that Trusted blocks. Add just those domains.
- Use Full only when you genuinely need open web access (for example, to let Andy research with web search and fetch), and you accept the security tradeoff.
You can change the policy at any time from the Cloud Environment settings page. New agent runs pick up the current policy.