New in Cursor! · Full changelog · Main announcement You can now define exactly which domains the agent is allowed to reach while running sandboxed commands. [image] The sandbox supports three levels of network access: restrict to domains in your sandbox.json, restrict to your allowlist plus Cur…

Hi Colin, on the enterprise admin console, is there a way to include Cursor’s defaults in the allowlist? (or alternatively, can I find a list of Cursor’s defaults somewhere?) [image] Thanks, Mike

the per-project sandbox.json is nice. most of my stuff only needs npm registry and a couple api endpoints so having a strict allowlist per repo makes sense. would be useful to see what the built-in defaults actually include though, even for non-enterprise users

Hey @mzs and @nedcodes ! Great callout. That has been added to the docs .

Thanks, that’s great. Is the idea that in an enterprise setup you’d manually paste the default list in as a starting point, or is there a way to include it explicitly? (or is it already part of it implicitly?)

Right now, when you set an allowlist in the admin Network Access Control panel, it replaces Cursor’s defaults entirely rather than merging with them. So yes, if you want to preserve the default domains, you’d need to include them in your admin allowlist manually.

As a non Enterprise client in Cursor 2.5.20 it looks like the sandbox features have drifted into my workspace experience and are preventing any remote execution from my workspace to my remote server, as described in my bug report Agents no longer can access sql connections - Support / Bug Reports - …

Closing this thread since it has been a while since this was announced. Any new questions, or loose ends from this thread should be filed as new reports in the appropriate forum category!

Cursor 2.5: Sandbox Network Access Controls

Announcements Release Discussions

Topic		Replies	Views
Cursor 2.5: Plugins, Sandbox Access Controls, and Async Subagents Announcements sandbox , marketplace , subagents	0	1051	February 17, 2026
Agent Sandboxing - available in Cursor 2.0 Announcements	0	4913	October 29, 2025
Deep dive on sandbox Feedback sandbox , auto-run	3	78	June 1, 2026
No option to use allowlist without sandbox Feedback sandbox , terminal , auto-run	2	510	February 5, 2026
Cursor in agents window can't access github via gh while it can in the repo window Bug Reports sandbox , terminal , auto-run , github , agents-window	2	225	June 2, 2026

Cursor 2.5: Sandbox Network Access Controls

Related topics