Sandbox settings - Hops

Sandbox settings lives under Workspace security. These are organization-wide security settings. Everyone in your organization works under them; only admins can change them.

Sandbox settings with the Allowed domains options Deny all, Allow all and Custom.

Allowed domains

Domains that agents are allowed to access from within a sandbox. This governs the sandbox an agent runs commands in. Agents also have built-in web search, page-reading and image import tools that run outside the sandbox, and this setting does not restrict those.

Option	Behavior
Deny all	A sandbox can reach only Hops file storage, so uploads and downloads keep working. No other host. This is the default.
Allow all	A sandbox can reach any host on the internet.
Custom	A sandbox can reach Hops file storage and the domains you list. No other host.

Select Save to apply a change, or Discard changes to revert. A saved change applies to a sandbox when it is created or next restarted. A sandbox that is already running keeps the policy it started with.