[FEATURE] For remote SSH work through a FW, Claude Web needs a static IP/FQDN jump server for security.

[rolinger]

Preflight Checklist

• [x] I have searched existing requests and this feature hasn't been requested yet
• [x] This is a single feature request (not multiple features)

Problem Statement

I am working with Claude Code Web version right now. The only way I can let it truly automate work on my server is if I disable my FW so Claude Code Web can SSH into my server. This is a major security issue because now I have opened up my servers/networks to the outside world. There doesn't seem to be a way of locking the access down because Claude Web is coming from random cloud IPs and there is apparently is no real FQDN (at least according to Claude) that I can use to even loosely lock it down.

Proposed Solution

A better way to do this would be if Claude Code Web had access to an Anthropic owned jump server (or servers) that would allow clients to add that jump server IPs and/or FQDN to our FWs to permit that IP through to get to our servers. Then Claude to could jump to that server and from there SSH into our server to continue automated work. As is we have to do manual uploads (or even git pulls from the server) and then manually execute code on the server. This disrupts the automated work flow and slows things down.

Alternative Solutions

I don't know an alternative solution, maybe a better mind than mine can think of one. But it IS a big issue that stops automated flow of work, greatly slows down projects and forces manual interaction to complete many tasks.

Priority

Medium - Would be very helpful

Feature Category

Other

Use Case Example

The above descriptions provide the scope of what you need to understand.

Additional Context

No response

[rolinger]

I see the Claude API has static IP ranges, and tested them for Claude Web to get through my FW, but they aren't making it through. Clause Web/CLI must be cloud based then.

And after further FW log review we had Claude try to connect on very specific ports that we know we could track in our FW to see what IPs its coming from, but we aren't getting any connection attempts. So claude code web THINKS its trying to connect, but something beyond it is blocking it for outbound connections.

So this could be fixed all if claude web was permitted outbound connections through a fixed IP jump server.

[github-actions[bot]]

This issue has been inactive for 30 days. If the issue is still occurring, please comment to let us know. Otherwise, this issue will be automatically closed in 30 days for housekeeping purposes.