662 pages for credential.

Configure auto mode Claude Code CLI · in the page auto-mode-config …md#what-the-classifier-blocks-by-default) requests for the host's own credentials. Requires Claude Code v2.1.257 or later * **Protected deployment namespaces / environments**: falls back to the Sens… Best practices for Claude Code Claude Code CLI · in the page best-practices …mand injection) - Authentication and authorization flaws - Secrets or credentials in code - Insecure data handling Provide specific line references and suggested fixes. ``` Tell Claude to use subage… Claude Code changelog Claude Code CLI · in the page changelog …sted runner: Fixed repository access failing since 2.1.296 when a git credential helper or askpass program reads its settings through `GIT_CONFIG` * Self-hosted runner: Fixed the orchestrator reportin… Push events into a running session with channels Claude Code CLI · in the page channels …e). You install a channel as a plugin and configure it with your own credentials. Telegram, Discord, and iMessage are included in the research preview. When Claude replies through a channel, you see… Channels reference Claude Code CLI · in the page channels-reference …ds are unchanged. Clients on Claude Code v2.1.234 or later also mask credentials in `description` and `input_preview`. You receive `[REDACTED]` in place of a recognizable provider credential token, s… Use Claude Code with Chrome Claude Code CLI · in the page chrome …-chrome`, because the browser extension can't authenticate with those credentials. Before v2.1.216, these sessions could enable Chrome integration, but every attempt to connect to the browser extensio… Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry Claude Code CLI · in the page claude-apps-gateway …orporate identity provider (IdP) instead of holding API keys or cloud credentials. The gateway holds the upstream credential, enforces model access and [managed settings](/docs/en/managed-settings.md)… Claude apps gateway configuration Claude Code CLI · in the page claude-apps-gateway-config …instead of a client secret, as Microsoft Entra does with certificate credentials, set `token_endpoint_auth_method: private_key_jwt`. Requires Claude Code v2.1.284 or later on the gateway server. Wit… Claude apps gateway deployment and operations Claude Code CLI · in the page claude-apps-gateway-deploy …tificate you upload to the registration if your IdP uses [certificate credentials](/docs/en/claude-apps-gateway-config.md#certificate-client-authentication) instead. Any OIDC-compliant IdP works: Okt… Deploy Claude apps gateway on AWS Claude Code CLI · in the page claude-apps-gateway-on-aws …ace billing, in place of Bedrock or alongside it. Its upstream entry, credentials, and IAM permissions differ from this page's Bedrock-scoped ones; the [Claude Platform on AWS upstream reference](/doc… Deploy Claude apps gateway on Google Cloud Claude Code CLI · in the page claude-apps-gateway-on-gcp …m \ sqladmin.googleapis.com \ secretmanager.googleapis.com \ iamcredentials.googleapis.com \ iam.googleapis.com \ compute.googleapis.com \ servicenetworking.googleapis.com \ run.googleap… Claude apps gateway spend limits Claude Code CLI · in the page claude-apps-gateway-spend-limits …give each developer, group, or the whole organization a ceiling on a credential everyone shares. By default, a Claude apps gateway forwards all inference through one shared upstream credential, so y… Use Claude Code in the cloud Claude Code CLI · in the page claude-code-on-the-web …#set-up-github-access) In Anthropic-hosted environments, your GitHub credentials stay encrypted on Anthropic's servers and never enter a session's VM. GitHub operations from the VM go through the [Gi… Explore the .claude directory Claude Code CLI · in the page claude-directory …gnore.', example: `# Local environment .env .env.local # API credentials config/secrets.json`, docsLink: '/en/worktrees#copy-gitignored-files-into-worktrees' }, { id: 'd… Claude Code on Claude Platform on AWS Claude Code CLI · in the page claude-platform-on-aws …ude.com/docs) on the same release schedule. You authenticate with AWS credentials or a workspace API key, and you pay through AWS Marketplace. Client-side features that Claude Code turns on through A… claude-tag Claude Code CLI · in the page claude-tag …span class="tm-qrow-sub">How admins set access per channel, and where credentials are stored</span></span></a><a class="link tm-qrow" href="/docs/claude-tag/admins/add-connections"><span class="tm-qro… CLI reference Claude Code CLI · in the page cli-reference …| | `claude mcp logout <name>` | Clear stored OAuth credentials for an MCP server… Configure cloud environments Claude Code CLI · in the page cloud-environments …. The [requests that never get a secret](#requests-that-never-get-the-credential) are listed there. ### Add network secrets A network secret is an API key or token you store on a cloud environment s… Code Review Claude Code CLI · in the page code-review …nges in the working tree. For uncommitted changes to files named like credentials or keys, such as `.env` and `*.tfvars` files, Claude Code follows the rules for [uploading a local repository to a clo… Review locally with /code-review Claude Code CLI · in the page code-review-local …ee * **Sensitive files**: for uncommitted changes to files named like credentials or keys, such as `.env` and `*.tfvars` files, Claude Code follows the rules for [uploading a local repository to a clo… Commands Claude Code CLI · in the page commands …rt goes to Anthropic; on a third-party provider, or without Anthropic credentials, Claude Code writes the report to a [local archive under `~/.claude/feedback-bundles/`](/docs/en/data-usage#telemetry-… Run Claude Code behind a corporate launcher Claude Code CLI · in the page corporate-launcher …tory launcher. The launcher applies the sandbox, network controls, or credential injection that the company's security posture depends on, and a binary that starts without it is a policy violation. `… Data usage Claude Code CLI · in the page data-usage …ention and usage policies](#data-retention) for your account type * **Credentials:** GitHub credentials are stored encrypted on Anthropic's servers and never enter the VM. GitHub traffic from the VM g… Desktop application Claude Code CLI · in the page desktop …nal on your computer. > [!NOTE] > > If your shell sets temporary AWS credentials, [give the AWS CLI a profile](#use-aws-credentials-in-a-proxycommand) instead of exporting `AWS_*` variables. ##### U… Development containers Claude Code CLI · in the page devcontainer …g anything accessible inside the container, including the Claude Code credentials stored in [`~/.claude`](/docs/en/claude-directory). > Only use dev containers when developing with trusted repositorie… Environment variables Claude Code CLI · in the page env-vars …the exact character set and where the check runs. A value that sets a credential, org or tenant, routing, or API-behavior header, such as `Authorization` or `Host`, counts as a [setting that needs app… Error reference Claude Code CLI · in the page errors …-token-revoked-or-expired) | | `API Error: 401 Invalid authentication credentials` | [Authentication](#api-error-401-invalid-authentication-credentials) | | `Login expired · Please run /login` | [Auth… Speed up responses with fast mode Claude Code CLI · in the page fast-mode …NTHROPIC_BASE_URL`](/docs/en/llm-gateway-connect#set-the-base-url-and-credential), so on a network that routes Claude traffic through an [LLM gateway](/docs/en/llm-gateway) and blocks direct egress to… Fullscreen rendering Claude Code CLI · in the page fullscreen …xt with no link, because opening a network path can send your Windows credentials to the host it names. * Some macOS terminals forward `Cmd`+click to the running app instead of opening the link them… Run Claude Code through a gateway Claude Code CLI · in the page gateways …ay > Route Claude Code through a self-hosted gateway for centralized credentials, usage tracking, and cost controls. Covers the architecture, Anthropic's Claude apps gateway, and using other gateway… Claude Code GitHub Actions Claude Code CLI · in the page github-actions …Claude subscription and pasting in an API key Claude Code saves the credential as a repository secret, named `ANTHROPIC_API_KEY` for an API key or `CLAUDE_CODE_OAUTH_TOKEN` for a subscription token.… Use Claude Code GitHub Actions with cloud providers Claude Code CLI · in the page github-actions-cloud-providers …kflow authenticates with that token, so you store no long-lived cloud credential in your repository. > [!NOTE] > > This page builds on the [GitHub Actions setup](/docs/en/github-actions.md#setup). It… Claude Code with GitHub Enterprise Server Claude Code CLI · in the page github-enterprise-server …tion. Plugin marketplaces hosted on your instance are also supported; credential requirements vary by surface, as described in [Plugin marketplaces on GHES](#plugin-marketplaces-on-ghes). For reposit… Claude Code GitLab CI/CD Claude Code CLI · in the page gitlab-ci-cd …Workload Identity Federation for GitLab** → **GCP** 2. **Add project credentials for GitLab API operations**: * Use `CI_JOB_TOKEN` by default, or create a Project Access Token with `api` scope… Keep Claude working toward a goal Claude Code CLI · in the page goal …goal: * An authentication failure, when Claude Code manages its own credentials. When a host manages them for you, such as the desktop app or a [cloud session](/docs/en/claude-code-on-the-web.md), C… Claude Code on Google Cloud's Agent Platform Claude Code CLI · in the page google-vertex-ai …ed GCP region To sign in with your own Google Cloud's Agent Platform credentials, follow [Sign in with Google Cloud's Agent Platform](#sign-in-with-agent-platform) below. To deploy Claude Code across… Run Claude Code programmatically Claude Code CLI · in the page headless …-allowedTools "Read" ``` In bare mode, Claude Code never reads OAuth credentials or the system keychain. For the Anthropic API, set `ANTHROPIC_API_KEY` in the environment, with a key created in the [… Set up Claude Code (local mode) for a HIPAA-ready organization Claude Code CLI · in the page hipaa-setup …e Enterprise sign-in | No | | A Claude Console API key or [federation credentials](/docs/en/authentication.md#anthropic-profiles-and-federation-credentials) | No. These sessions belong to a Claude Con… Hooks reference Claude Code CLI · in the page hooks …uest`, `model_not_found`, `server_error`, `max_output_tokens`, `cloud_credential_error`, `unknown` | | `InstructionsLoaded` | load reason | `session_start`, `nested_traversal`, `path_glob_match`, `inc… Automate actions with hooks Claude Code CLI · in the page hooks-guide …uest`, `model_not_found`, `server_error`, `max_output_tokens`, `cloud_credential_error`, `unknown` | | `InstructionsLoaded` | load reason | `session_start`, `nested_traversal`, `path_glob_match`, `inc… Interactive mode Claude Code CLI · in the page interactive-mode …Code offers the wait only while a saved claude.ai login is the active credential. ### Turn automatic continue off In `/config`, turn off **Continue automatically at usage limit**, or set [`autoConti… Legal and compliance Claude Code CLI · in the page legal-and-compliance …thenticate with their own Anthropic API key, Claude subscription plan credentials, or 3P inference provider credential (Amazon Bedrock, Google Cloud's Agent Platform, Microsoft Foundry). That usage is… Other LLM gateways Claude Code CLI · in the page llm-gateway …provides A gateway gives your organization one place to manage: * **Credentials**: the provider key stays server-side; developers hold gateway credentials instead * **Usage tracking**: attribute usa… Connect Claude Code to an LLM gateway Claude Code CLI · in the page llm-gateway-connect …eck whether your admin already configured it, or set the base URL and credential yourself, then verify the connection and fix gateway errors. An [LLM gateway](/docs/en/llm-gateway) is a proxy your or… Claude Code gateway compatibility guide Claude Code CLI · in the page llm-gateway-protocol …n individual developer authenticating Claude Code to a gateway with a credential you were given, see [Connect Claude Code to an LLM gateway](/docs/en/llm-gateway-connect.md) This page covers: * [API… Roll out an LLM gateway for your organization Claude Code CLI · in the page llm-gateway-rollout …Code: configure it to forward what Claude Code sends, issue developer credentials, distribute the configuration through managed settings, and verify the rollout. This page walks an administrator thro… Control MCP server access for your organization Claude Code CLI · in the page managed-mcp ….example.com" } } } } ``` ### Authenticate with per-user credentials Any user on the machine can read this file, so don't store API keys or other credentials in `env` blocks. Pass per-us… Deploy managed settings Claude Code CLI · in the page managed-settings …fuller `managed-settings.json` with sandboxing, a network allowlist, credential protections, and local data retention. For managed MCP servers, which you deploy alongside any of these through `manag… Connect Claude Code to tools via MCP Claude Code CLI · in the page mcp …he same server-reported text in its `Issue:` row. Claude Code redacts credential-like text from this detail and never includes the expanded server URL, which can carry secrets. Claude Code appends no… Connect to MCP servers Claude Code CLI · in the page mcp-quickstart …d command checks later in this section. > > If the detail points to a credential or URL, also check the warnings in the `claude mcp list` output. Claude Code flags config values with hidden leading or…