Anthropic adds self-hosted sandboxes and MCP tunnels to Claude Managed Agents

Anthropic is expanding Claude Managed Agents with two enterprise features: self-hosted sandboxes and MCP tunnels.

Self-hosted sandboxes let tool execution run in customer or partner infrastructure instead of Anthropic’s environment.

MCP tunnels securely connect Claude to private MCP servers without exposing them to the public internet.

The agent orchestration layer still runs on Anthropic’s servers, so deployment control improves but remains partial.

Both capabilities are early-stage, with support involving partners like Cloudflare, Daytona, Modal, and Vercel.