Claude Corner
Phone Sessions Running Without Your Sandbox? Give claude remote-control Its Own Settings File.
By Steven Sorensen ยท 10 Nov 2026

At a glance
- A new
--settingsflag onclaude remote-controlapplies one settings file to every session the server starts. - Put the flag after
remote-control, because a global flag before it makes the server refuse to start. - Restart the server after you edit the file, since running sessions keep the old copy.
You start claude remote-control so you can steer Claude from your phone, and you want them sandboxed. The old --sandbox switch is gone, and --settings typed before remote-control stops the server. Hand the server one settings file instead.
Why it matters
Remote Control sessions run on your machine with your files, even when you type from a phone. Anthropic's docs say --sandbox was removed in v2.1.300 and that you turn on sandboxing in a settings file. A global --settings flag before remote-control makes the server refuse to start. The v2.1.321 changelog adds a new --settings <file> flag on claude remote-control itself. The docs flag table may still lag, so treat the changelog as the source for this new flag.
How to give every Remote Control session the same settings
We built these steps from the docs and changelog and have not run them in a live session.
- Check your version with
claude --version. You need v2.1.321 or later. On Tuesday morning npmlatestwas v2.1.322, andstablewas still v2.1.311. - Create a settings file such as
.claude/remote-control.json. That path is our choice, not a documented name. The sandboxing docs showsandbox.enabledset to true andallowUnsandboxedCommandsset to false. - The docs describe
sandbox.failIfUnavailable. Our read: set it to true in the samesandboxblock so startup fails if the sandbox cannot start. - Start the server with the new flag after the subcommand:
claude remote-control --settingsplus the file path. Add--namefor a title. - Open a session from your phone, run
/sandbox, and ask Claude to run a harmless command to confirm the sandbox is active. - When you change the file, stop the server with Ctrl+C and start it again. The changelog says no new session starts until you restart.
# We have not run this script end to end on every platform. It prints and checks, and changes no files.
# Run it in a test shell. Nothing is written to your shell profile.
claude --version
# Optional file and server start, left commented so this script changes no files.
# The path .claude/remote-control.json is our choice, not a documented name.
# mkdir -p .claude
# cat > .claude/remote-control.json <<'JSON'
# {
# "sandbox": {
# "enabled": true,
# "allowUnsandboxedCommands": false,
# "failIfUnavailable": true
# }
# }
# JSON
# Flag goes after remote-control, not before it.
# claude remote-control --settings .claude/remote-control.json --name "Sandboxed remote"
Gotchas
- Order matters.
claude --settings file remote-controlis the form the docs say refuses to start. Put the new--settingsflag afterremote-control. - The flag is changelog only so far. The Remote Control flag table did not yet list
--settingswhen we checked. Use the v2.1.321 changelog, andclaude remote-control --helpfor your build. - Edits need a restart. A changed file blocks new sessions until you restart.
- The ! prompt is different. The docs say those lines usually run outside the sandbox.
- Linux and WSL2 need dependencies. If
/sandboxshows only a Dependencies tab, the sandbox cannot start, and withfailIfUnavailableon, Claude Code exits.
Sources:
- Claude Code v2.1.321 release notes
- Continue local sessions from any device with Remote Control, Claude Code docs
- Sandboxing, Claude Code docs
- CLI reference, Claude Code docs
Recommended AI prompt
Copy this paragraph into ChatGPT, Claude, Gemini, Grok, or whatever AI you use.
I run Claude Code Remote Control from my workstation so I can drive it from my phone, and I want every session sandboxed. Using only Anthropic's docs and the v2.1.321 changelog, where the new --settings flag is documented, help me write a small settings file, explain why the flag has to come after the subcommand, and give a short checklist to confirm the sandbox from my phone. Ask what operating system I use, and do not invent settings keys.