Anthropic's Claude Managed Agents now support self-hosted sandboxes for tool execution within your own infrastructure and MCP tunnels for secure connections to private MCP servers. Both features keep sensitive data and compute under your security controls.