# Anthropic opens self-hosted Claude Managed Agents in private beta: server, sandboxes and history on your infra

Canonical: https://theagenticweekly.com/news/anthropic-self-hosted-claude-managed-agents · Evidence: Reported · First seen: 2026-11-13 23:04 UTC · Source published: 2026-11-13 21:29 UTC · Brief published: 2026-11-14 06:03 UTC · Updated: 2026-11-14 06:03 UTC · Author: Agentic Weekly

> Anthropic has put self-hosted Claude Managed Agents into private beta, saying "every part of the service runs in your own cloud or on-premise." Customers run the server, a PostgreSQL 16 or later database and the sandbox workers; model calls go to Anthropic, Bedrock, Google Cloud, Foundry or their own gateway.

## What changed

- The whole Managed Agents service can now run on customer infrastructure: the agent harness, sandboxes, credentials and session history, in a customer cloud account or an on-premise data center. Access is a private beta requested through an Anthropic account team; Help Net Security reports it opened on Nov 12, 2026.
- Customers operate three pieces: the server (cma-server), which serves the API and runs the agent loop; a PostgreSQL 16 or later database for agents and session history; and workers that run the agent's shell and file tools in sandboxes. Without a database, a restart erases the data.
- Model requests can go to the Claude API, Amazon Bedrock, Claude models on Google Cloud, Microsoft Foundry, or the customer's own gateway. Developers keep the same core APIs, SDK and ant CLI as the hosted service.
- Credentials can live in the customer's own secrets manager; a proxy outside the sandbox adds them to MCP tool and supported API calls. Environments can be limited to allowlisted hosts, and every session's steps export over OpenTelemetry.
- Anthropic's docs say the customer now owns jobs Anthropic does on the hosted service, including securing the server, hosting memory stores, detecting unusual usage and installing each release. The server is licensed under a separate Software License Agreement.

## The three ways to run Managed Agents now

Who hosts each part, per Anthropic's self-hosted docs

| Option | Sandboxes | Service (API, loop, history) | Model |
| --- | --- | --- | --- |
| Cloud sandboxes (default) | Anthropic | Anthropic | Anthropic |
| Self-hosted sandboxes | You | Anthropic | Anthropic |
| Self-hosted Managed Agents | You | You | Anthropic, or a provider you choose |

## What you take on when you self-host

Our reading: this is not an air-gapped Claude. The model still runs at Anthropic or a cloud provider, and the docs say each model call sends the conversation so far, including tool inputs and results, plus session, agent and environment IDs when the call goes to the Claude API. What moves in-house is storage, credentials and the control plane.

The operational load moves too. The docs warn that the bash tool is a real shell with the worker's permissions, so isolation depends on running each worker in a disposable container or VM (the Docker Compose stack and cma-sandboxes Helm chart do this per session). Each trust level needs its own deployment, and you install every release yourself.

## License terms buyers should read first (reported)

The New Stack reports that the server ships as a proprietary binary customers cannot modify, that the license bars non-Claude models unless Anthropic permits them, and that customers have eight hours to disable a feature or roll back after a written safety notice, plus one business day to install a designated safety update. It also reports customers cannot block usage signals sent to Anthropic. Procurement teams used to owning their change windows should check those clauses against internal policy before a pilot.

## In the source's words

> "For agents with that level of access, some teams want the whole service in their own environment, not just the sandbox."
> (Anthropic, Operate Claude Managed Agents inside your security perimeter, https://claude.com/resources/articles/self-hosted-claude-managed-agents)

> "The worker doesn't isolate that shell."
> (Anthropic, self-hosted Claude Managed Agents docs, https://platform.claude.com/docs/en/managed-agents/self-hosted)

## What we have not verified

- We do not have beta access, so we have not installed the server or run a session.
- Pricing for the self-hosted option is not stated in the announcement or the docs we read.
- The license terms below (an eight-hour window to act on safety notices, one business day for safety updates, model reservation, usage signals) are as reported by The New Stack; we did not read the full license text ourselves.
- Anthropic does not name beta customers or say when the private beta will open more widely.

## Timeline

- Source published: 2026-11-13 21:29 UTC
- First seen by our watcher: 2026-11-13 23:04 UTC (via The New Stack)
- Brief published: 2026-11-14 06:03 UTC

## Sources

- [Anthropic: Operate Claude Managed Agents inside your security perimeter](https://claude.com/resources/articles/self-hosted-claude-managed-agents) (primary source) (fetched 2026-11-14)
- [Claude docs: Self-hosted Claude Managed Agents](https://platform.claude.com/docs/en/managed-agents/self-hosted) (primary source) (fetched 2026-11-14)
- [Help Net Security: Self-hosted Claude Managed Agents keeps agent credentials in your environment](https://www.helpnetsecurity.com/2026/11/12/anthropic-self-hosted-claude-managed-agents/) (fetched 2026-11-14)
- [The New Stack: Anthropic now lets you self-host Claude Managed Agents](https://thenewstack.io/self-hosted-claude-managed-agents/) (fetched 2026-11-14)

## Related

- [Claude: verdict and setup guide](https://theagenticweekly.com/tools/claude)
- [ChatGPT vs Claude](https://theagenticweekly.com/compare/chatgpt-vs-claude)
- [All news briefs](https://theagenticweekly.com/news)
- [New AI models this week](https://theagenticweekly.com/models/this-week)

## How to cite

Agentic Weekly, "Anthropic opens self-hosted Claude Managed Agents in private beta: server, sandboxes and history on your infra", published 2026-11-14 06:03 UTC, https://theagenticweekly.com/news/anthropic-self-hosted-claude-managed-agents