Thank you for clarifying that the client is currently the only supported way to inspect the SandboxCode.
My concern is less about the answer itself and more about how discoverable that limitation is for dedicated-server owners. The phrase “as I already said” makes it sound as though this was clearly communicated and broadly understood, but that has not been my experience. For hosting providers, administrators, and server-side mod developers, there is no obvious supported method to verify the individual effective settings after the code is loaded.
A server can show that the SandboxCode property was accepted, but that is not the same as being able to confirm which settings are actually active. Requiring access to a client for verification is also difficult for automated hosting, troubleshooting, and configuration auditing.
I appreciate the direct answer. I would only ask that this limitation be documented more clearly, and that server-side inspection or a supported read-only command be considered in the future.