I am using the Arduino Web Editor on MacOS High Sierra (10.13.6).
Every time I restart my laptop, I am forced to allow the request (see attached screenshot) : "Do you want the application ArduinoCreateAgent.app to accept incoming network connections?"
I answer "Allow" and despite the firewall settings apparently remembering this selection (see attached screenshot), I still have to allow the request after every login or restart.