Claude Console lets administrators disable web fetch and restrict access by domain
Organization administrators can disable the web fetch tool or configure allowed or blocked domains in Claude Console. Disabling it causes a 400 error for Messages API requests that include the tool; in Claude Managed Agents sessions, the agent receives an error result.
Organization administrators can disable the web fetch tool for the entire organization on the Capabilities page in Claude Console. If the tool remains enabled, they can configure allowed or blocked domains on the same page.
According to the release notes, when the tool is disabled, every Messages API request that includes web fetch will fail with a 400 error. In a Claude Managed Agents session, a web_fetch call will instead return an error result to the agent.
Why it matters
Organization settings now directly affect whether applications and agents can retrieve web content through the web fetch tool and which domains they can retrieve it from. The way errors are reported differs between Messages API and Claude Managed Agents.
Two audiences, two different impacts
What this means
For individuals
When troubleshooting a 400 error on a request containing web fetch, developers must also consider the possibility that an administrator has disabled the tool for the organization.
For a business
A company can centrally control whether the web fetch tool is available and use allowed or blocked domains to manage the scope of its access to web sources.
Risks and complianceCheck the original
Event sources
clearly official source · 1 publisher, 0 independent. We count feeds from the same owner only once.