Skip to main content
When a Cowork task runs on your computer, Claude runs its shell commands in a virtual machine (VM). Your network settings decide which hosts those commands can reach. Some of those hosts are download-only in a task.

​
What a task can reach

You’ll find the settings in Settings > Capabilities. On Team and Enterprise plans, your admin sets them for the whole organization in Organization settings > Capabilities.

​
Download-only hosts

If a task can reach these hosts, it can download from them, but uploads to them are blocked. This doesn’t apply when Domain allowlist is All domains. To publish or push, use a terminal on your own computer. If your organization deploys Claude Desktop with its own model provider, your admin’s list of allowed hosts replaces these settings. In that case, Claude Desktop doesn’t block uploads to these hosts. These limits aren’t a security boundary. Don’t rely on them alone to keep data inside the VM.

​
What a blocked command shows

The command fails, and its output usually says why. A git push prints this line:
A publish command gets the message below. npm shows only its short form, 403 Package registry is download-only.
Two errors don’t say why. With an SSH remote, git reports a closed connection, for both fetch and push. Git LFS reports an Authorization error. To clone or fetch from an SSH remote, use its https://github.com/ URL instead.

​
Push or publish from your own computer

Ask Claude to make the changes in a folder you connected to the task. Then open a terminal on your own computer and go to that folder. Review the changes, then commit and push them or run the publish command yourself. These pages cover related topics.