consultance.ai
Cybersecurity

Enterprise AI Perimeter — run Claude agents inside your boundary

The reason regulated teams banned AI was one question: where does the data live. Claude's self-hosted sandboxes and MCP tunnels answer it. A step-by-step setup guide with the exact commands to run agent tool execution on your own infrastructure and reach internal systems over a single outbound encrypted connection, no public endpoint. The actual setup guide, step by step.

🔥 optional · live interactive tool

Open the full setup guide

Browser-based. No signup. Drop in your numbers and see the trade in real time. Opens in a new tab so the prompts stay where you left them.

Your AI pilot is stalled on one question: where does the data live?

Regulated teams banned AI because nobody could answer where the data lives. Claude's self-hosted sandboxes and MCP tunnels run agent tool execution on your own infrastructure over a single outbound encrypted connection — the answer that unstalls the pilot.

Source repo
https://platform.claude.com/docs/en/managed-agents/self-hosted-sandboxes

The code is public and free. The setup prompt below installs and wires it for you.

Step 1

Paste this setup prompt — Claude installs it for you

Easy mode · paste this into Claude

Claude installs it for you, step by step.

Never used Claude before? It is free to start. Open it in a new tab, copy the prompt, paste it in. It asks one question, then walks you through everything.

  1. Step 1
    Open claude.ai ↗

    Sign up free. No card. Takes 30 seconds.

  2. Step 2

    One click. Lands on your clipboard.

  3. Step 3
    Paste + send

    Claude asks what you need + guides you the rest of the way.

Open claude.ai ↗
Tune the prompt for your level (optional)
Preview the prompt (you do not need to read it)
Install Enterprise AI Perimeter — run Claude agents inside your boundary on my computer. Walk me through it.

Repo: https://platform.claude.com/docs/en/managed-agents/self-hosted-sandboxes
What it does: The reason regulated teams banned AI was one question: where does the data live. Claude's self-hosted sandboxes and MCP tunnels answer it. A step-by-step setup guide with the exact commands to run agent tool execution on your own infrastructure and reach internal systems over a single outbound encrypted connection, no public endpoint. The actual setup guide, step by step.

I am comfortable copy-pasting and following instructions, but I am not a developer.

Rules:
- Plain English. Define jargon the first time it appears (repo, env var, port, dependency).
- One step at a time. Exact command in a code block. Tell me which app to paste it into (Terminal on Mac, PowerShell on Windows).
- One sentence per command explaining what it does and what success looks like.
- After each command, wait. I will tell you the output before you move on.
- If a tool is missing (git, node, docker, python), give me the one-line install for my OS first.
- If something errors, diagnose before the next step. Do not skip.

First message: ask only "What is your operating system — macOS, Windows, or Linux?" Then start step 1.

Reference steps from the public guide (adapt to my OS, do not just paste them at me):
1. Open the full setup guide (button below) for the exact commands. It covers self-hosted sandboxes and MCP tunnels end to end.
2. Self-hosted sandboxes: create a self_hosted environment in the Console, generate the scoped environment key, install the ant CLI, and run the environment worker so tool execution stays on your infrastructure.
3. MCP tunnels: request research-preview access, configure in Console workspace settings as org admin, and deploy the lightweight outbound gateway so agents reach internal systems with no public endpoint.
4. Lock it down: never put your org API key on the worker host, scope MCP tunnel access with least privilege, run container-per-session for sensitive data, and keep your own audit trail.
5. Note the ceiling: the agent loop still runs on Anthropic, both features are preview/beta, and a vendor cert is not your compliance. Test before crown-jewel use.

Stop when the app opens and I confirm it works.
where it breaks

Before you connect live data

  • • Run dummy data first. Real client data is not a test bed.
  • • API keys never go in a public repo. Use env vars and a secrets manager.
  • • Add logging, access control, monitoring, and a rollback path before launch.
  • • Read the license. Forking a repo without checking is how lawsuits start.
license note

Credit the original author

Self-hosted sandboxes are public beta and MCP tunnels research preview as of writing; verify status and Zero Data Retention / HIPAA BAA eligibility against current Anthropic docs. Anthropic holds SOC 2 Type II, ISO 27001, ISO 42001, HIPAA; your own deployment compliance remains your responsibility.

the newsletter

AI news worth opening.

The AI tools, launches, and shifts that actually matter, in plain English. New library drops the moment they land.

100% freeNo paywall, everUnsubscribe anytime

Read this far? You want agents inside your perimeter, not a stalled pilot. Let us wire it — scoped, isolated, and audit-ready.