Anthropic moved the agent inside your firewall. self-hosted sandboxes, detailed september 16, run…
anthropic moved the agent inside your firewall. self-hosted sandboxes, detailed september 16, run claude managed agents in customer-controlled environments with mcp tunnels, deployable on cloudflare, daytona, modal or vercel.
the agent's perimeter is now your cloud account.
Context
Anthropic's Claude Managed Agents blog, New in Claude Managed Agents: self-hosted sandboxes and MCP tunnels, says the sandbox runs on your infrastructure or with providers like Cloudflare, Daytona, Modal or Vercel, with self-hosted sandboxes in public beta and MCP tunnels in research preview at that time. The agent loop (orchestration, context management, error recovery) stays on Anthropic's infrastructure while tool execution moves to the customer's. The docs describe an environment worker serving a work queue that runs the tool calls Claude requests, with pre-built workers in the ant CLI and the Python, TypeScript and Go SDKs. A secondary digest of 16 September covers Python SDK v1.6.0 with Managed Agents additions.
The capability and the named providers are first-party. Detailed September 16 is not supported: the launch post carries a 19 May 2026 metadata date, no first-party 16 September item was found, and the digest covers other Managed Agents changes; metadata dates are not release dates, so first availability is unresolved. Moved the agent inside your firewall overstates it, since only tool execution and data stay in the customer's environment. The beta status was as of the blog and the current status was not verified.
Related work
- Earlier note on OpenAI's managed Agents API ↗A different vendor and surface: OpenAI's agent runs in OpenAI's environment.
Watch next
- Anthropic's changelog for first availability and current beta status.
Sources
- New in Claude Managed Agents: self-hosted sandboxes and MCP tunnels (Anthropic)claude.com
- Self-hosted sandboxes (Claude docs)platform.claude.com
- Claude daily digest, 16 Sep 2026 (claudebeat)claudebeat.ai
Provenance
The note above is reproduced unedited from the original post, first published on Threads on 21 September 2026 at 10:38 IST. Sources are the papers and datasets the note draws on.
View the original post ↗Embed this note
More notes
The air is now being asked to keep its own ledger
the air is now being asked to keep its own ledger: ecmwf’s aifs compo becomes the first ai model to forecast atmospheric composition globally every three hours, cleanair simulates 365 days of pm2.5 over china in ten seconds, and a unified framework maps six pollutants at one kilometer across the whole country. the air now files its own composition report.
read the note →The current is now being asked to draw its own map
the current is now being asked to draw its own map: china’s langya 2.0 predicts six ocean phenomena including internal waves and mesoscale eddies, a deep net called wenhai resolves eddies globally with air sea flux formulas built in, and scripps infers surface currents from the way temperature patterns deform in satellite images. the ocean now files its own circulation report.
read the note →The soil is now being asked to report its own carbon
the soil is now being asked to report its own carbon: a nix color sensor paired with generative data augmentation predicts soil organic carbon without a lab, random forest drives 74 percent of soil health mapping studies, and sentinel 2 tracks five year carbon change across france and italy from 922 samples. the dirt now files its own carbon account.
read the note →