Claude Code · China
Even coding tools now
have borders.
On July 5, Alibaba reportedly banned internal use of Claude Code. Four days later, per The Register, Chinese authorities told developers to move off it entirely, citing "backdoor" concerns. One company's policy scaled to a government directive in ninety-six hours.
Four Days
From one company's rule
to a national directive
Alibaba's internal ban on Claude Code on July 5 initially looked like a single-firm risk-management decision. Four days later, per The Register, that has widened into a government-level instruction to evaluate alternatives. The cited reason is "backdoor concerns" — a worry specific to agent-style tools that reach beyond the code file into the whole development environment.
| Until this week | From today |
|---|---|
| Claude Code a lead candidate at China sites | Parallel evaluation of alternatives required |
| One-firm rule (Alibaba) | Government-level guidance to all developers |
| Broad file read/write from the CLI | Agent permissions themselves in scope for review |
What To Do
Actions for China-exposed teams
The load falls on teams with China operations or China-based customers. Purely domestic teams elsewhere are barely affected.
Line up an alternative agent
Qwen Code, Cursor with a swapped-in domestic model, or Cline + DeepSeek — evaluate two or three options that can run inside China at production-worthy speed.
Document your permission model
Have a clear answer to "why does a coding assistant need arbitrary file read/write?" ready for regulators and auditors. That's where the operational side of the "backdoor" argument lands.
Watch for spread
Whether this stays China-specific or other jurisdictions follow will be visible within two or three weeks. Monitor how Cursor and Copilot respond as well — the concern generalizes to all agentic coding tools.
Frontier
"Agent permissions"
become the front line
Bottom Line
Not a tool fight — a permissions fight
This isn't a one-on-one referendum on Claude Code. Read straight, it's about the design pattern: agentic coding tools reach broadly into files, shells, and networks, and that same reach is starting to run out of welcome at national borders. Practically, teams outside China can safely file this as "not applicable" for now — but over the next three months, expect a template obligation to explain your agent's permission model.