Windows Claude app Code mode: api.notion.com blocked by egress proxy (works on Mac)

Summary

In the Windows Claude desktop app, Code mode blocks access to api.notion.com via the egress proxy, returning 403 Forbidden with x-deny-reason: host_not_allowed. The same functionality works fine on the Mac version of the app.

Steps to Reproduce

1. Open Claude desktop app on Windows (MSIX package: Claude_pzs8sxrjxfjjc)
2. Switch to Code mode
3. Attempt any API call to api.notion.com (e.g., via Notion MCP server or direct curl)

Expected Behavior

api.notion.com should be accessible in Code mode, as it is on the Mac app.

Actual Behavior

The egress proxy returns:

HTTP/1.1 403 Forbidden
x-deny-reason: host_not_allowed

The allowed_hosts list in the proxy JWT token does not include api.notion.com. The proxy only allows development-related domains (npm, PyPI, GitHub, etc.).

Adding api.notion.com to the app's local allowlist setting does not help, since the restriction is enforced server-side in the JWT-based egress proxy.

Environment

• OS: Windows 11 Pro 10.0.26100
• App package: Claude_pzs8sxrjxfjjc (Microsoft Store / MSIX)
• Mac app: Works correctly with the same Notion integration

Suggested Fix

Add api.notion.com (and ideally *.notion.com) to the egress proxy's allowed_hosts for Windows Code mode, matching the Mac app's behavior.