Docs search: credentials / page 7 of 12 / Source Intelligence

Track cost and usage Claude Code CLI · in the page agent-sdk/cost-tracking …k. Because it sets `CLAUDE_CODE_USE_BEDROCK`, it requires working AWS credentials for [Amazon Bedrock](https://code.claude.com/docs/en/amazon-bedrock.md); without them the query fails. ```python Pyth…

Intercept and control agent behavior with hooks Claude Code CLI · in the page agent-sdk/hooks …analytics * **Transform inputs and outputs** to sanitize data, inject credentials, or redirect file paths * **Require human approval** for sensitive actions like database writes or API calls * **Track…

Hosting the Agent SDK Claude Code CLI · in the page agent-sdk/hosting …ffic through an egress proxy that enforces domain allowlists, injects credentials, and logs requests. See [Secure Deployment](https://code.claude.com/docs/en/agent-sdk/secure-deployment.md) for the fu…

Connect to external tools with MCP Claude Code CLI · in the page agent-sdk/mcp …MCP servers require authentication to access external services. Pass credentials through environment variables in the server configuration. ### Pass credentials via environment variables Use the `e…

Quickstart Claude Code CLI · in the page agent-sdk/quickstart …et `CLAUDE_CODE_USE_BEDROCK=1` environment variable and configure AWS credentials * **Claude Platform on AWS**: set `CLAUDE_CODE_USE_ANTHROPIC_AWS=1` and `ANTHROPIC_AWS_WORKSPACE_ID`, then configure A…

Securely deploying AI agents Claude Code CLI · in the page agent-sdk/secure-deployment …or high-security deployments, you can place sensitive resources (like credentials) outside the boundary containing the agent. If something goes wrong in the agent's environment, resources outside that…

Persist sessions to external storage Claude Code CLI · in the page agent-sdk/session-storage …Each adapter takes a pre-configured client instance, so you control credentials, TLS, region, and pooling. The following example wires the object-store adapter into `query()` and then resumes from i…

Extend agents with skills Claude Code CLI · in the page agent-sdk/skills …ties including: - SQL injection risks - XSS vulnerabilities - Exposed credentials - Insecure configurations ``` Once the file exists, the skill is available through the SDK. Claude invokes it when a…

Agent SDK reference - TypeScript Claude Code CLI · in the page agent-sdk/typescript …ntial_error'`: Claude Code couldn't obtain usable AWS or Google Cloud credentials on the machine it runs on, so no request reached the cloud provider. The usual cause is a cloud sign-in that expired o…

Manage multiple agents with agent view Claude Code CLI · in the page agent-view …`. The supervisor and its sessions authenticate with the same stored credentials as your interactive sessions. For which settings and shell variables reach a session, including `PATH`, see [Settings…

Claude Code on Amazon Bedrock Claude Code CLI · in the page amazon-bedrock …ptional - only needed if you don't have another mechanism for getting credentials) * Appropriate IAM permissions To sign in with your own Amazon Bedrock credentials, follow [Sign in with Amazon Bedro…

Share session output as artifacts Claude Code CLI · in the page artifacts …nding on what their accounts can access. The page never sees anyone's credentials; claude.ai makes the calls on the page's behalf. * **Viewers approve access first**: claude.ai asks each viewer for pe…

Authentication Claude Code CLI · in the page authentication …re your first session, or you rebuilt a dev container that keeps your credentials in a [volume](https://code.claude.com/docs/en/devcontainer.md#persist-authentication-and-settings-across-rebuilds). If…

Configure auto mode Claude Code CLI · in the page auto-mode-config …md#what-the-classifier-blocks-by-default) requests for the host's own credentials. Requires Claude Code v2.1.257 or later * **Protected deployment namespaces / environments**: falls back to the Sens…

Best practices for Claude Code Claude Code CLI · in the page best-practices …per` in the file you pass with `--settings`, or your cloud provider's credentials. * `--append-system-prompt`, `--mcp-config`, and `--settings` explicitly pass in what the run *does* need. Hooks you p…

Claude Code changelog Claude Code CLI · in the page changelog …g when the Google access token from a federation (`external_account`) credentials file is about to expire * Self-hosted runner: Added `CLAUDE_RUNNER_SPAWN_REASON` to the orchestrator's spawn-runner ho…

Push events into a running session with channels Claude Code CLI · in the page channels …e). You install a channel as a plugin and configure it with your own credentials. Telegram, Discord, and iMessage are included in the research preview. When Claude replies through a channel, you see…

Channels reference Claude Code CLI · in the page channels-reference …ds are unchanged. Clients on Claude Code v2.1.234 or later also mask credentials in `description` and `input_preview`. You receive `[REDACTED]` in place of a recognizable provider credential token, s…

Use Claude Code with Chrome Claude Code CLI · in the page chrome …pass `--chrome`. The browser extension can't authenticate with those credentials. > [!NOTE] > > Chrome integration is not available through third-party providers like Amazon Bedrock, Google Cloud's…

Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry Claude Code CLI · in the page claude-apps-gateway …orporate identity provider (IdP) instead of holding API keys or cloud credentials. The gateway holds the upstream credential, enforces model access and [managed settings](https://code.claude.com/docs/…

Claude apps gateway configuration Claude Code CLI · in the page claude-apps-gateway-config …instead of a client secret, as Microsoft Entra does with certificate credentials, set `token_endpoint_auth_method: private_key_jwt`. Requires Claude Code v2.1.284 or later on the gateway server. Wit…

Claude apps gateway deployment and operations Claude Code CLI · in the page claude-apps-gateway-deploy …tificate you upload to the registration if your IdP uses [certificate credentials](https://code.claude.com/docs/en/claude-apps-gateway-config.md#certificate-client-authentication) instead. Any OIDC-c…

Deploy Claude apps gateway on AWS Claude Code CLI · in the page claude-apps-gateway-on-aws …ace billing, in place of Bedrock or alongside it. Its upstream entry, credentials, and IAM permissions differ from this page's Bedrock-scoped ones; the [Claude Platform on AWS upstream reference](http…

Deploy Claude apps gateway on Google Cloud Claude Code CLI · in the page claude-apps-gateway-on-gcp …m \ sqladmin.googleapis.com \ secretmanager.googleapis.com \ iamcredentials.googleapis.com \ iam.googleapis.com \ compute.googleapis.com \ servicenetworking.googleapis.com \ run.googleap…

Use Claude Code in the cloud Claude Code CLI · in the page claude-code-on-the-web …#set-up-github-access) In Anthropic-hosted environments, your GitHub credentials stay encrypted on Anthropic's servers and never enter a session's VM. GitHub operations from the VM go through the [Gi…

Explore the .claude directory Claude Code CLI · in the page claude-directory …gnore.', example: `# Local environment .env .env.local # API credentials config/secrets.json`, docsLink: '/en/worktrees#copy-gitignored-files-into-worktrees' }, { id: 'd…

Claude Code on Claude Platform on AWS Claude Code CLI · in the page claude-platform-on-aws …ude.com/docs) on the same release schedule. You authenticate with AWS credentials or a workspace API key, and you pay through AWS Marketplace. Client-side features that Claude Code turns on through A…

claude-tag Claude Code CLI · in the page claude-tag …span class="tm-qrow-sub">How admins set access per channel, and where credentials are stored</span></span></a><a href="/docs/claude-tag/admins/add-connections" class="link tm-qrow"><span class="tm-qro…

Configure cloud environments Claude Code CLI · in the page cloud-environments …b operations go through a dedicated proxy that keeps your real GitHub credentials outside the session's VM, independent of the environment's [access level](#access-levels). Sessions in a self-hosted e…

Code Review Claude Code CLI · in the page code-review …nges in the working tree. For uncommitted changes to files named like credentials or keys, such as `.env` and `*.tfvars` files, Claude Code follows the rules for [uploading a local repository to a clo…

Review locally with /code-review Claude Code CLI · in the page code-review-local …ee * **Sensitive files**: for uncommitted changes to files named like credentials or keys, such as `.env` and `*.tfvars` files, Claude Code follows the rules for [uploading a local repository to a clo…

Commands Claude Code CLI · in the page commands …rt goes to Anthropic; on a third-party provider, or without Anthropic credentials, Claude Code writes the report to a [local archive under `~/.claude/feedback-bundles/`](/docs/en/data-usage#telemetry-…

Run Claude Code behind a corporate launcher Claude Code CLI · in the page corporate-launcher …ation's setup: enter the sandbox, apply # network controls, or inject credentials. exec "$@" ``` Make it executable with `chmod +x`. The setup portion is whatever your launcher must do before Claude…

Data usage Claude Code CLI · in the page data-usage …ention and usage policies](#data-retention) for your account type * **Credentials:** GitHub credentials are stored encrypted on Anthropic's servers and never enter the VM. GitHub traffic from the VM g…

Desktop application Claude Code CLI · in the page desktop …nal on your computer. > [!NOTE] > > If your shell sets temporary AWS credentials, [give the AWS CLI a profile](#use-aws-credentials-in-a-proxycommand) instead of exporting `AWS_*` variables. ##### U…

Development containers Claude Code CLI · in the page devcontainer …g anything accessible inside the container, including the Claude Code credentials stored in [`~/.claude`](https://code.claude.com/docs/en/claude-directory). > Only use dev containers when developing w…

Environment variables Claude Code CLI · in the page env-vars …ther with `ANTHROPIC_ORGANIZATION_ID`, Claude Code selects federation credentials, which rank above your `/login` credential. See [authentication precedence](/docs/en/authentication#authentication-pre…

Error reference Claude Code CLI · in the page errors …-token-revoked-or-expired) | | `API Error: 401 Invalid authentication credentials` | [Authentication](#api-error-401-invalid-authentication-credentials) | | `Login expired · Please run /login` | [Auth…

Fullscreen rendering Claude Code CLI · in the page fullscreen …xt with no link, because opening a network path can send your Windows credentials to the host it names. * Some macOS terminals forward `Cmd`+click to the running app instead of opening the link them…

Run Claude Code through a gateway Claude Code CLI · in the page gateways …ay > Route Claude Code through a self-hosted gateway for centralized credentials, usage tracking, and cost controls. Covers the architecture, Anthropic's Claude apps gateway, and using other gateway…

Claude Code GitHub Actions Claude Code CLI · in the page github-actions …s://code.claude.com/docs/en/memory.md) for details. ### Protect your credentials > [!WARNING] > > Never commit API keys or OAuth tokens directly to your repository. Always store them as GitHub Secre…

Use Claude Code GitHub Actions with cloud providers Claude Code CLI · in the page github-actions-cloud-providers …b issues to the workflow, so each workflow run gets short-lived cloud credentials. The bullets in each tab summarize what to create, and each tab links the cloud vendor's own guide for the console-lev…

Claude Code with GitHub Enterprise Server Claude Code CLI · in the page github-enterprise-server …**Create GitHub App**. GHES redirects you back to Claude with the app credentials stored automatically. **4. Install the app on your repositories** From the GitHub App page on your GHES instance, in…

Claude Code GitLab CI/CD Claude Code CLI · in the page gitlab-ci-cd …Workload Identity Federation for GitLab** → **GCP** 2. **Add project credentials for GitLab API operations**: * Use `CI_JOB_TOKEN` by default, or create a Project Access Token with `api` scope…

Keep Claude working toward a goal Claude Code CLI · in the page goal …goal: * An authentication failure, when Claude Code manages its own credentials. When a host manages them for you, such as the desktop app or a [cloud session](https://code.claude.com/docs/en/claude…

Claude Code on Google Cloud's Agent Platform Claude Code CLI · in the page google-vertex-ai …ed GCP region To sign in with your own Google Cloud's Agent Platform credentials, follow [Sign in with Google Cloud's Agent Platform](#sign-in-with-agent-platform) below. To deploy Claude Code across…

Run Claude Code programmatically Claude Code CLI · in the page headless …-allowedTools "Read" ``` In bare mode, Claude Code never reads OAuth credentials or the system keychain. For the Anthropic API, set `ANTHROPIC_API_KEY` in the environment, with a key created in the […

Set up Claude Code (local mode) for a HIPAA-ready organization Claude Code CLI · in the page hipaa-setup …e Enterprise sign-in | No | | A Claude Console API key or [federation credentials](https://code.claude.com/docs/en/authentication.md#anthropic-profiles-and-federation-credentials) | No. These sessions…

Hooks reference Claude Code CLI · in the page hooks …-developers-sign-in-and-connect), Claude Code also [removes Anthropic credentials](https://code.claude.com/docs/en/hipaa-setup.md#anthropic-credentials-in-commands-hooks-and-mcp-servers) from the hook…