agent sandbox disable

Disables sandbox mode and falls back to allowlist mode instead.

agent sandbox disable turns sandbox mode off. The CLI then falls back to allowlist mode, where individual commands must be approved manually instead of running isolated automatically.

✅ WHEN TO USE IT?

Sandbox restrictions (e.g. no network) permanently get in the way of a particular workflow

⛔ WHEN NOT TO?

Network access is only needed for a single sandboxed run

agent sandbox disable turns off the sandbox entirely instead of just allowing network.

Better: Use agent sandbox run <cmd> --network to allow network access just for that run

SOURCES

Cursor Docs — CLI Reference: Parameters ↗ cursor.com