{"type":"analysis","id":"analysis:research-claude-managed-agents-now-run-tool-calls-inside-nvidia-openshell-sandboxes-but","slug":"research-claude-managed-agents-now-run-tool-calls-inside-nvidia-openshell-sandboxes-but","title":"Claude Managed Agents now run tool calls inside NVIDIA OpenShell sandboxes, but the boundary only covers what runs on your host","description":"The Anthropic–NVIDIA announcement comes down to a working pattern: Claude's agent loop stays on Anthropic's servers while tool calls run in a customer-hosted OpenShell sandbox where everything is blocked unless a rule allows it. Anthropic's own cookbook shows that tools running on Anthropic's side, MCP routes and the session token itself sit outside that boundary.","published_at":"2026-10-22T14:00:00.000Z","updated_at":"2026-10-22T14:00:00.000Z","record_date":"2026-10-22","topics":["anthropic","sandbox","agents","research"],"source_urls":["https://platform.claude.com/docs/en/managed-agents/self-hosted-sandboxes","https://claude.com/blog/giving-companies-more-control-over-their-ai-agents-with-nvidia","https://platform.claude.com/docs/en/managed-agents/self-hosted-sandboxes-security","https://github.com/NVIDIA/OpenShell","https://nvidianews.nvidia.com/news/open-agent-safety-platform","https://github.com/anthropics/claude-quickstarts/tree/main/managed-agents/self-hosted-sandboxes/openshell","https://thenextweb.com/news/nvidia-open-agent-safety-platform"],"language":"en","routes":{"html":"https://newruntime.com/analysis/research-claude-managed-agents-now-run-tool-calls-inside-nvidia-openshell-sandboxes-but/","markdown":"https://newruntime.com/analysis/research-claude-managed-agents-now-run-tool-calls-inside-nvidia-openshell-sandboxes-but.md","json":"https://newruntime.com/analysis/research-claude-managed-agents-now-run-tool-calls-inside-nvidia-openshell-sandboxes-but.json"},"author":{"role":"author","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"editorial_provenance":{"desk":"authorial","target_ref":"deep_research:dbf120f1-552b-49f7-a9bc-fb9b75d5f16b","authorial_article_id":"dbf120f1-552b-49f7-a9bc-fb9b75d5f16b"},"next_reads":[{"type":"topic","path":"/topics/anthropic/","url":"https://newruntime.com/topics/anthropic/","title":"Anthropic","reason":"Explore the anthropic topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/anthropic.md","json_url":"https://newruntime.com/topics/anthropic.json"},{"type":"topic","path":"/topics/sandbox/","url":"https://newruntime.com/topics/sandbox/","title":"Sandbox","reason":"Explore the sandbox topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/sandbox.md","json_url":"https://newruntime.com/topics/sandbox.json"},{"type":"topic","path":"/topics/agents/","url":"https://newruntime.com/topics/agents/","title":"Agents","reason":"Explore the agents topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/agents.md","json_url":"https://newruntime.com/topics/agents.json"},{"type":"collection","path":"/analysis/","url":"https://newruntime.com/analysis/","title":"Analysis","reason":"Open the latest authorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/analysis.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}