Claude Managed Agents Get MCP Tunnels, Self-Hosted Sandboxes — and First Profitable Quarter Looms
This is the enterprise-control release Claude Managed Agents users have been demanding since launch. MCP tunnels let an Anthropic-hosted agent reach MCP servers inside a customer VPC without exposing them to the public internet — closing the single biggest objection from regulated-industry customers. Self-hosted sandboxes go further: tool execution (file system, code interpreter, browser, etc.) can now run inside the customer's own infrastructure, keeping data inside the trust boundary.
The in-session update capability is the underrated feature. Operators can change an agent's MCP server list and available tools while a session is running, without restarting state — important for long-horizon coding and ops agents where re-establishing context is expensive. This mirrors the 'remote worker' framing that Dev.to engineers and the MateClaw open-source-harness post pushed this week: coding agents are becoming long-running actors that need approval gates, sandboxes, and live reconfiguration.
Competitively, Anthropic is racing AWS (which today hit GA on its own Claude Platform integration), Google (Gemini Spark), and OpenAI Codex. The first-profitable-quarter claim — reported by TechCrunch's Code with Claude coverage — is the headline number, but the architectural choice to externalize sandboxes is what enterprise buyers will care about. Combined with the new $1.25B/month xAI Colossus compute deal and KPMG alliance, Anthropic is positioning as the most enterprise-credible frontier lab heading into the OpenAI IPO window.
Skeptics on Dev.to flagged that production reliability still has gaps: one widely-read post documented Claude returning ```json fences 14% of the time despite explicit no-fence prompts (across 12,400 calls on Sonnet 4.5/4.7), and another showed a 3-step agent cost $4.20 due to a hidden O(n²) tool-call pattern. The MCP-tunnel + sandbox release helps with isolation, but the structured-output and cost-shape problems remain real day-to-day pain.