agent sandbox enable

Enables sandbox mode for command execution.

agent sandbox enable turns sandbox mode on: commands then run with read/write access to the workspace but isolated from the rest of the system (network disabled by default). The setting persists across sessions.

✅ WHEN TO USE IT?

Turn on persistently isolated command execution for all future sessions

⛔ WHEN NOT TO?

The sandbox should only apply to a single command, not permanently

agent sandbox enable changes the persistent configuration for all future runs.

Better: Use agent sandbox run <cmd> to run just one command in isolation

SOURCES

Cursor Docs — CLI Reference: Parameters ↗ cursor.com