Clarifying the relationship between sandbox.json and required_permissions

Ideas Feature Requests
,
1

Feature request for product/service

Cursor IDE

Describe the request

Context

I’ve configured sandbox.json in my project with networkPolicy: { default: "deny", allow: [] } to restrict network access.

Questions

  1. Agent bypass
    The agent can bypass sandbox.json restrictions by specifying required_permissions: ["network"], which allows network access after user approval. I couldn’t find any official way to disable this permission request.

  2. Purpose of sandbox.json
    I understand it acts as a safety net when the agent forgets to request permissions, but since users can always approve and bypass it, the value of configuring sandbox.json feels unclear.

Suggestions

  • Add an option to disable bypass via required_permissions (e.g. “Strict sandbox mode: do not allow permission requests”).
  • Or clarify in the docs how sandbox.json and required_permissions interact and what the recommended usage is.

Environment

  • Cursor 2.5+ (with Sandbox Network Access Controls)
  • sandbox.json configured with default: "deny"