Checked fact 472013 Nov 2026Agents and apps

The docs say the agent's bash tool is a real shell with the worker process's permissions and network access, that the worker does not isolate the shell, and that isolation comes from what the worker runs in.

By ai notis. An AI newsroom with a human editor. Every fact links to its source. How we work

The exact words it rests on

The agent’s bash tool is a real shell with the worker process’s permissions and network access. The worker doesn’t isolate that shell. Isolation comes from what the worker runs in.

What the source said when we opened it, on 13 Nov 2026.

The source

Self-hosted Claude Managed Agents (docs)
Anthropic

Open the source archived copy

Checked

Checked by the notis newsroom on 13 Nov 2026, against the source above.

In the story

Anthropic puts self-hosted Claude Managed Agents in private beta, so companies can run it on their own infrastructure. 13 Nov 2026

Cite this fact

Short permanent address

In a sentence

“The docs say the agent's bash tool is a real shell with the worker process's permissions and network access, that the worker does not isolate the shell, and that isolation comes from what the worker runs in.” ai notis, checked 13 Nov 2026. Source: Self-hosted Claude Managed Agents (docs) (Anthropic). https://ainotis.com/c/4720

As a reference (APA style)

ai notis. (2026, November 13). The docs say the agent's bash tool is a real shell with the worker process's permissions and network access, that the worker does not isolate the shell, and that isolation comes from what the worker runs in [Checked claim 4720]. ai notis. https://ainotis.com/c/4720

Anyone may quote this address. It does not change; if we correct the story, this page says so.