You can do this via a Docker container or seatbelt on MacOS.

in both cases you'd limit it so CC can only talk to the required Anthropic APIs.

So not zero access, but as close to it as you can get.