From the source
Anthropic announced that Claude Managed Agents can now run in self-hosted sandboxes (public beta) and connect to private MCP servers via MCP tunnels (research preview).
The sandbox executes tools on the customer's own infrastructure or with managed providers such as Cloudflare, Daytona, Modal, or
Vercel, while the agent loop remains on Anthropic's infrastructure.
MCP tunnels allow agents to reach internal databases, private APIs, and other services without exposing them to the public internet.



