Copilot CLI sandbox network bypass prompt: allow Sume hosts

When a sandboxed shell command in Copilot CLI hits a destination the sandbox proxy blocks, version 1.0.92-3 (2026-10-02) now offers a network bypass prompt instead of just failing. If the destination is one of Sume's documented hosts, approving it for that command is reasonable; for everything else, read the host first.

This applies to shell commands such as curl against Sume's API, not to the MCP connection Copilot CLI itself holds.

What the prompt covers

The release notes say sandboxed commands offer a bypass whenever the proxy blocks a destination. Sandbox CA commands arrived earlier, in v1.0.91.

At a glance

Sume hosts you may see

Sume's documented endpoints are https://mcp.sume.com/mcp for MCP and https://api.sume.com for the REST API, including Agent Completions at /v1/agent/completions. Results can also be hosted on Sume media domains.

Approve per command, not permanently, and confirm that the API key in the command is the one you intend to use.

• mcp.sume.com for MCP.
• api.sume.com for REST and agent runs.
• Treat any other host in a Sume-related command as unexpected.

Limits and what is not verified

I did not verify which media hostnames a given result URL will use, so check the host in the prompt rather than trusting this table for downloads. The prompt wording in the release notes is brief and I did not capture its exact text.