Enterprise AI Perimeter — run Claude agents inside your boundary
The reason regulated teams banned AI was one question: where does the data live. Claude's self-hosted sandboxes and MCP tunnels answer it. A step-by-step setup guide with the exact commands to run agent tool execution on your own infrastructure and reach internal systems over a single outbound encrypted connection, no public endpoint. The actual setup guide, step by step.
Open the full setup guide
Browser-based. No signup. Drop in your numbers and see the trade in real time. Opens in a new tab so the prompts stay where you left them.
Your AI pilot is stalled on one question: where does the data live?
Regulated teams banned AI because nobody could answer where the data lives. Claude's self-hosted sandboxes and MCP tunnels run agent tool execution on your own infrastructure over a single outbound encrypted connection — the answer that unstalls the pilot.
Set it up yourself
Your platform team can follow the guide and run the commands. The full step-by-step setup is below — free. The cost is your engineers' time, and the risk that matters at the perimeter: putting an org API key on a worker host, over-scoping a tunnel, or skipping container-per-session isolation on crown-jewel data because the docs are preview-stage and a vendor cert is not your compliance.
Jump to the prompts ↓We wire it into your business
We wire it into your stack: gateway placement next to your MCP servers, egress policy on the sandbox, RBAC scoping on every tunneled system, container isolation per session, and an audit trail your auditor accepts. The pilot ships inside your boundary without a misconfigured tunnel becoming the incident.
Book a build call →The code is public and free. The setup prompt below installs and wires it for you.
Paste this setup prompt — Claude installs it for you
Claude installs it for you, step by step.
Never used Claude before? It is free to start. Open it in a new tab, copy the prompt, paste it in. It asks one question, then walks you through everything.
- Step 1Open claude.ai ↗
Sign up free. No card. Takes 30 seconds.
- Step 2
One click. Lands on your clipboard.
- Step 3Paste + send
Claude asks what you need + guides you the rest of the way.
▸Tune the prompt for your level (optional)
▸Preview the prompt (you do not need to read it)
Install Enterprise AI Perimeter — run Claude agents inside your boundary on my computer. Walk me through it. Repo: https://platform.claude.com/docs/en/managed-agents/self-hosted-sandboxes What it does: The reason regulated teams banned AI was one question: where does the data live. Claude's self-hosted sandboxes and MCP tunnels answer it. A step-by-step setup guide with the exact commands to run agent tool execution on your own infrastructure and reach internal systems over a single outbound encrypted connection, no public endpoint. The actual setup guide, step by step. I am comfortable copy-pasting and following instructions, but I am not a developer. Rules: - Plain English. Define jargon the first time it appears (repo, env var, port, dependency). - One step at a time. Exact command in a code block. Tell me which app to paste it into (Terminal on Mac, PowerShell on Windows). - One sentence per command explaining what it does and what success looks like. - After each command, wait. I will tell you the output before you move on. - If a tool is missing (git, node, docker, python), give me the one-line install for my OS first. - If something errors, diagnose before the next step. Do not skip. First message: ask only "What is your operating system — macOS, Windows, or Linux?" Then start step 1. Reference steps from the public guide (adapt to my OS, do not just paste them at me): 1. Open the full setup guide (button below) for the exact commands. It covers self-hosted sandboxes and MCP tunnels end to end. 2. Self-hosted sandboxes: create a self_hosted environment in the Console, generate the scoped environment key, install the ant CLI, and run the environment worker so tool execution stays on your infrastructure. 3. MCP tunnels: request research-preview access, configure in Console workspace settings as org admin, and deploy the lightweight outbound gateway so agents reach internal systems with no public endpoint. 4. Lock it down: never put your org API key on the worker host, scope MCP tunnel access with least privilege, run container-per-session for sensitive data, and keep your own audit trail. 5. Note the ceiling: the agent loop still runs on Anthropic, both features are preview/beta, and a vendor cert is not your compliance. Test before crown-jewel use. Stop when the app opens and I confirm it works.
Before you connect live data
- • Run dummy data first. Real client data is not a test bed.
- • API keys never go in a public repo. Use env vars and a secrets manager.
- • Add logging, access control, monitoring, and a rollback path before launch.
- • Read the license. Forking a repo without checking is how lawsuits start.
Credit the original author
Self-hosted sandboxes are public beta and MCP tunnels research preview as of writing; verify status and Zero Data Retention / HIPAA BAA eligibility against current Anthropic docs. Anthropic holds SOC 2 Type II, ISO 27001, ISO 42001, HIPAA; your own deployment compliance remains your responsibility.
AI news worth opening.
The AI tools, launches, and shifts that actually matter, in plain English. New library drops the moment they land.
Read this far? You want agents inside your perimeter, not a stalled pilot. Let us wire it — scoped, isolated, and audit-ready.
More like this
Other builds worth a weekend
Cyber Skills Pack — 754 MITRE-Mapped Skills
Cloudflare leaked 2,000 bugs their human pen testers missed. Mozilla pulled 271 from Firefox 150. 754 cyber skills mapped to MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, and NIST AI RMF — plus a live Codebase Exposure Calculator that tells you how many critical CVEs are hiding in your own stack.
AiToEarn content agent
The open-source tool that runs an entire content team by itself. One post lands on 14 platforms in 90 seconds. AI replies in your voice.
Clicky AI desktop assistant
Talk to your screen and it actually listens. The desktop AI for non-technical operators tired of switching between five apps to finish one task.