In Claude Managed Agents, a cloud environment with limited networking now also applies its allowed_hosts to the web_search and web_fetch tools.
What to do: If you use limited networking with web tools, add any hosts in allowed_domains to allowed_hosts (or remove those entries) to avoid 400 errors on session creation.