[FEATURE] Disable local command execution and work with local files at all. Hard.

Resolved 💬 2 comments Opened Feb 14, 2026 by everanium Closed Mar 15, 2026

Preflight Checklist

  • [x] I have searched existing requests and this feature hasn't been requested yet
  • [x] This is a single feature request (not multiple features)

Problem Statement

Claude Code Desktop doesn't have a built-in setting to disable local command execution. There's no config flags like:

"localExecution": false #(Execute only remote)
"localWrite": false #(Write only remote)
"localRead": false #(Read only remote)

Claude Chat said:

Combined with rejecting any local command Claude Code proposes. After a few rejections it will learn within the session to only use the ssh-mcp tools. This isn't perfect, but it's the closest you can get today. If full local lockdown matters to you, it might be worth submitting as a feature request to Anthropic — a "remote-only mode" for Claude Code would be genuinely useful.

Proposed Solution

If it possible.

Better to have hard switch inside Claude Code. So that under no circumstances could it launch anything locally by mistake during operation, no way. No write operations locally, no run anything. Only orchestrate directly through MCPs and only read data directly received through MCP, without creating temporary files(better) on local machine(only when working with Claude AI). In general, so that the AI ​​itself cannot do anything locally - write/exec/read, means Claude AI.

For example if i run SSH-MCP server locally on my main Windows machine and configure globally this local SSH-MCP server for all projects in my Claude Code then all commands strictly goto SSH-MCP through local STDIO -> remote testing Linux machines. Don`t matter what type of MCP is used.

Thanks.

Alternative Solutions

_No response_

Priority

Medium - Would be very helpful

Feature Category

Other

Use Case Example

_No response_

Additional Context

_No response_

View original on GitHub ↗

This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗