$ sbx settings list   # 2026-10-08T06:57Z
Starting sandboxd daemon...
KEY                                  VALUE                              TYPE     SOURCE    RESTART   DESCRIPTION
claude.remoteControl                 false                              bool     default             Allow Claude Code's /remote-control channel to …
clipboard.imagePaste                 false                              bool     default             Allow sandboxed agents to read the host clipboa…
diagnostics.autoUpload                                                  string   default             Tri-state consent for automatic diagnostics bun…
env.rememberHostCommands             false                              bool     default             Let an approval of an environment's host comman…
kit.allowExtractedAgents             true                               bool     default             Admit the pinned kit references that replace fo…
kit.allowLocalKits                   true                               bool     default             Allow installing kits from local directories or…
kit.allowedSources                   ["docker.io/"]                     json     default             JSON array of allowed kit source prefixes (e.g.…
kit.ignoreTransparencyLog            false                              bool     default             Verify keyless kit signatures without requiring…
kit.requireSignature                 false                              bool     default             Require a valid signature from a trusted signer…
kit.trustedSigners                   [{"identityRegexp":"^.*@docker\…   json     default             JSON array of trusted signer policies (key-base…
mcp.forceLocalGateway                false                              bool     default   yes       Force the local MCP gateway even when entitled …
model.providers                      {}                                 json     default             JSON object of inference endpoints for `sbx run…
no_proxy                                                                string   default   yes       No-proxy exception list for sandbox, daemon, an…
no_proxy.daemon                                                         string   default   yes       No-proxy exception list for daemon and supporte…
no_proxy.sandbox                                                        string   default   yes       No-proxy exception list for sandbox egress only…
platform.allowExperimentalFeatures   true                               bool     default             Allow experimental features.
platform.images.registryMirror                                          string   default             Registry mirror host for Docker Hub-resolving t…
platform.images.useDHI               false                              bool     default             Use Docker Hardened Image (DHI) equivalents (dh…
proxy                                                                   string   default   yes       Upstream proxy for sandbox, daemon, and support…
proxy.daemon                                                            string   default   yes       Upstream proxy for daemon and supported CLI hos…
proxy.integratedAuth                 false                              bool     default   yes       Enable integrated NTLM/Kerberos authentication …
proxy.sandbox                                                           string   default   yes       Upstream proxy for sandbox egress only (overrid…
sandbox.disk.dockerVolume            10g                                string   default             Size of a sandbox's /var/lib/docker volume (min…
skills.defaultMode                   readonly                           string   default             Default for an omitted --skills flag or sbx.yam…
ssh.agentForwardingEnabled           true                               bool     default   yes       Allow clients to forward an SSH agent into sand…
ssh.agentSocketPath                                                     string   default   yes       Optional fixed host SSH agent socket path. Empt…
ssh.autoCreate                       false                              bool     default   yes       Create a sandbox on SSH connect when it does no…
ssh.defaultAgent                     shell                              string   default   yes       Built-in agent used for SSH auto-created sandbo…
ssh.defaultTemplate                                                     string   default   yes       Template image override for SSH auto-created sa…
ssh.workspaceRoot                                                       string   default   yes       Host directory holding SSH auto-created sandbox…
tls.allowNegativeSerial              false                              bool     default   yes       Accept server certificates with a negative seri…

Some fields were truncated; use --no-trunc or --json to see them in full.

RESTART=yes: existing daemon-side consumers require `sbx daemon restart`. Supported CLI clients and new sandboxes use their current proxy settings immediately.
[exit 0]
