New in Cursor! · Full changelog · Main announcement You can now define exactly which domains the agent is allowed to reach while running sandboxed commands. [image] The sandbox supports three levels of network access: restrict to domains in your sandbox.json, restrict to your allowlist plus Cur…

Hi Colin, on the enterprise admin console, is there a way to include Cursor’s defaults in the allowlist? (or alternatively, can I find a list of Cursor’s defaults somewhere?) [image] Thanks, Mike

the per-project sandbox.json is nice. most of my stuff only needs npm registry and a couple api endpoints so having a strict allowlist per repo makes sense. would be useful to see what the built-in defaults actually include though, even for non-enterprise users

Hey @mzs and @nedcodes ! Great callout. That has been added to the docs .

Thanks, that’s great. Is the idea that in an enterprise setup you’d manually paste the default list in as a starting point, or is there a way to include it explicitly? (or is it already part of it implicitly?)

Right now, when you set an allowlist in the admin Network Access Control panel, it replaces Cursor’s defaults entirely rather than merging with them. So yes, if you want to preserve the default domains, you’d need to include them in your admin allowlist manually.

As a non Enterprise client in Cursor 2.5.20 it looks like the sandbox features have drifted into my workspace experience and are preventing any remote execution from my workspace to my remote server, as described in my bug report Agents no longer can access sql connections - Support / Bug Reports - …

Closing this thread since it has been a while since this was announced. Any new questions, or loose ends from this thread should be filed as new reports in the appropriate forum category!

Cursor 2.5: Sandbox Network Access Controls

Announcements Release Discussions

Colin (Colin) Split this topic February 19, 2026, 1:17pm 8

A post was split to a new topic: MacOS sandbox blocking Docker socket connection

Topic		Replies	Views
Cursor 2.5: Plugins, Sandbox Access Controls, and Async Subagents Announcements sandbox , marketplace , subagents	0	989	February 17, 2026
Agent Sandboxing - available in Cursor 2.0 Announcements	0	4192	October 29, 2025
No option to use allowlist without sandbox Feedback sandbox , terminal , auto-run	3	377	March 4, 2026
MacOS sandbox blocking Docker socket connection Help	9	198	March 24, 2026
Cursor 2.6: MCP Apps Release Discussions mcp , chat	1	548	March 23, 2026

Cursor 2.5: Sandbox Network Access Controls

Related topics