Codex, ChatGPT Work and Claude Code make five different choices about outbound network access. Here is what each one allows before you configure anything, what the docs publish, and where the boundary does not reach.
What your agent sandbox can reach by default
calendar_today
September 15, 2026
domain
workos