$ sbx settings list # 2026-10-08T06:57Z Starting sandboxd daemon... KEY VALUE TYPE SOURCE RESTART DESCRIPTION claude.remoteControl false bool default Allow Claude Code's /remote-control channel to … clipboard.imagePaste false bool default Allow sandboxed agents to read the host clipboa… diagnostics.autoUpload string default Tri-state consent for automatic diagnostics bun… env.rememberHostCommands false bool default Let an approval of an environment's host comman… kit.allowExtractedAgents true bool default Admit the pinned kit references that replace fo… kit.allowLocalKits true bool default Allow installing kits from local directories or… kit.allowedSources ["docker.io/"] json default JSON array of allowed kit source prefixes (e.g.… kit.ignoreTransparencyLog false bool default Verify keyless kit signatures without requiring… kit.requireSignature false bool default Require a valid signature from a trusted signer… kit.trustedSigners [{"identityRegexp":"^.*@docker\… json default JSON array of trusted signer policies (key-base… mcp.forceLocalGateway false bool default yes Force the local MCP gateway even when entitled … model.providers {} json default JSON object of inference endpoints for `sbx run… no_proxy string default yes No-proxy exception list for sandbox, daemon, an… no_proxy.daemon string default yes No-proxy exception list for daemon and supporte… no_proxy.sandbox string default yes No-proxy exception list for sandbox egress only… platform.allowExperimentalFeatures true bool default Allow experimental features. platform.images.registryMirror string default Registry mirror host for Docker Hub-resolving t… platform.images.useDHI false bool default Use Docker Hardened Image (DHI) equivalents (dh… proxy string default yes Upstream proxy for sandbox, daemon, and support… proxy.daemon string default yes Upstream proxy for daemon and supported CLI hos… proxy.integratedAuth false bool default yes Enable integrated NTLM/Kerberos authentication … proxy.sandbox string default yes Upstream proxy for sandbox egress only (overrid… sandbox.disk.dockerVolume 10g string default Size of a sandbox's /var/lib/docker volume (min… skills.defaultMode readonly string default Default for an omitted --skills flag or sbx.yam… ssh.agentForwardingEnabled true bool default yes Allow clients to forward an SSH agent into sand… ssh.agentSocketPath string default yes Optional fixed host SSH agent socket path. Empt… ssh.autoCreate false bool default yes Create a sandbox on SSH connect when it does no… ssh.defaultAgent shell string default yes Built-in agent used for SSH auto-created sandbo… ssh.defaultTemplate string default yes Template image override for SSH auto-created sa… ssh.workspaceRoot string default yes Host directory holding SSH auto-created sandbox… tls.allowNegativeSerial false bool default yes Accept server certificates with a negative seri… Some fields were truncated; use --no-trunc or --json to see them in full. RESTART=yes: existing daemon-side consumers require `sbx daemon restart`. Supported CLI clients and new sandboxes use their current proxy settings immediately. [exit 0]