581 pages for credentials.

Automate actions with hooks Claude Code CLI · in the page hooks-guide …failure` | Your sign-in completes, but Claude Code can't save the new credentials to its [credential storage](https://code.claude.com/docs/en/authentication.md#credential-management). Fires in place o… Legal and compliance Claude Code CLI · in the page legal-and-compliance …thenticate with their own Anthropic API key, Claude subscription plan credentials, or 3P inference provider credential (Amazon Bedrock, Google Cloud's Agent Platform, Microsoft Foundry). That usage is… Other LLM gateways Claude Code CLI · in the page llm-gateway …provides A gateway gives your organization one place to manage: * **Credentials**: the provider key stays server-side; developers hold gateway credentials instead * **Usage tracking**: attribute usa… Connect Claude Code to an LLM gateway Claude Code CLI · in the page llm-gateway-connect …naged-settings.md), device management, or an [`apiKeyHelper`](#rotate-credentials-with-apikeyhelper), so Claude Code picks them up at startup with nothing for you to set. To check whether your organiz… Claude Code gateway compatibility guide Claude Code CLI · in the page llm-gateway-protocol …laude.com/docs/en/authentication.md#anthropic-profiles-and-federation-credentials). Classifier requests skip the rest of Claude Code's system prompt, so on those requests the block is the only marker… Roll out an LLM gateway for your organization Claude Code CLI · in the page llm-gateway-rollout …Code: configure it to forward what Claude Code sends, issue developer credentials, distribute the configuration through managed settings, and verify the rollout. This page walks an administrator thro… Control MCP server access for your organization Claude Code CLI · in the page managed-mcp ….example.com" } } } } ``` ### Authenticate with per-user credentials Any user on the machine can read this file, so don't store API keys or other credentials in `env` blocks. Pass per-us… Deploy managed settings Claude Code CLI · in the page managed-settings …it, without combining entries or fields from lower sources | `sandbox.credentials.awsPairs`, `sandbox.ripgrep` | | Provided MCP servers | Combines the server names from every source; when two sources… Connect Claude Code to tools via MCP Claude Code CLI · in the page mcp …ed issuer. * Sends [MCP OAuth](#authenticate-with-remote-mcp-servers) credentials only to a token endpoint served over HTTPS or at `localhost`, `127.0.0.1`, or `::1`. Sign-in fails for a server whose… Connect to MCP servers Claude Code CLI · in the page mcp-quickstart …-with-remote-mcp-servers) for fixed callback ports and pre-configured credentials. ## Next steps With one server connected, explore the rest of what MCP enables: * [Find more MCP servers](https://c… Claude Code on Microsoft Foundry Claude Code CLI · in the page microsoft-foundry …ptional - only needed if you don't have another mechanism for getting credentials) > [!NOTE] > > If you are deploying Claude Code to multiple users, [pin your model versions](#4-pin-model-versions) b… Model configuration Claude Code CLI · in the page model-config …when a member signs in or uses their own API key. Organization-scoped credentials, such as organization service keys, are not tied to a user, so the restriction does not apply to them. The Claude Con… Monitoring Claude Code CLI · in the page monitoring-usage …OL`, Claude Code removes every developer-set per-signal protocol. * **Credentials**: when you set `OTEL_EXPORTER_OTLP_HEADERS`, `OTEL_EXPORTER_OTLP_CLIENT_KEY`, or `OTEL_EXPORTER_OTLP_CLIENT_CERTIFICA… Enterprise network configuration Claude Code CLI · in the page network-config …authentication If your proxy requires basic authentication, include credentials in the proxy URL: ```bash theme={null} export HTTPS_PROXY=http://username:[email protected]:8080 ``` > [!WA… Choose a permission mode Claude Code CLI · in the page permission-modes …/chrome.md) browser actions that could send page content, cookies, or credentials off-origin * Deleting files in `/tmp`, `$TMPDIR`, or another shared scratch or cache directory by wildcard, glob, or a… Configure permissions Claude Code CLI · in the page permissions …file`, prompts because accessing a network path can send your Windows credentials to the host it names. The same check applies to [PowerShell tool](https://code.claude.com/docs/en/tools-reference.md#p… Test plugins with evals Claude Code CLI · in the page plugin-evals …cored graders, and `claude plugin eval init` call the model with your credentials, so they count against your plan's usage limits or your API bill. When the command reports a cost, the figure is a [li… Host and maintain a marketplace Claude Code CLI · in the page plugins/host-marketplace …zation's GitHub or GitLab connection on claude.ai, so your users' git credentials aren't involved. Organization sync is stricter about the repository than `/plugin marketplace add` is: * **Marketpla… Install and manage plugins Claude Code CLI · in the page plugins/install …te marketplace A private marketplace is one in a repository you need credentials to clone, on GitHub or any other git host. You add it with the same `/plugin marketplace add` or `claude plugin market… Manage mods for your organization Claude Code CLI · in the page plugins/mods/admin …* The machine has managed settings * The session runs on [`/login` credentials](https://code.claude.com/docs/en/authentication#authentication-precedence) for a Team or Enterprise plan A user who… Use the mods API Claude Code CLI · in the page plugins/mods/api …while the conversation is still cached. Both calls use the session's credentials, so they bill to the user's plan, API key, or cloud provider. [The types for your build](https://code.claude.com/docs/… Manage Claude Code plugins for your organization Claude Code CLI · in the page plugins/org …t-based marketplace runs with git on the user's machine, using stored credentials and no prompts. For users without git-host accounts, use a [seed](#seed-containers-and-ci) instead. A managed entry a… Troubleshoot plugins Claude Code CLI · in the page plugins/troubleshooting …exists and you have access. If the repository is right, the cause is credentials. Claude Code turns off git's prompts and askpass programs, including one set in `GIT_ASKPASS`, and runs SSH in batch m… Quickstart Claude Code CLI · in the page quickstart …** screen for you to sign in with corporate SSO Once logged in, your credentials are stored and you won't need to log in again. Learn more in [Credential Management](https://code.claude.com/docs/en/a… Continue local sessions from any device with Remote Control Claude Code CLI · in the page remote-control …as any Claude Code session. The connection uses multiple short-lived credentials, each scoped to a single purpose and expiring independently. While Remote Control is connected, the session transcrip… Automate work with scheduled tasks Claude Code CLI · in the page routines …oesn't block a run's push. A self-hosted run that pushes with the git credentials your deployment provides is checked against those instead. See [Configure git](https://code.claude.com/docs/en/self-ho… Choose a sandbox environment Claude Code CLI · in the page sandbox-environments …for any container you operate: review what is mounted writable, what credentials and tokens are reachable inside it, and what the network egress policy allows. You can layer the built-in Bash sandbo… Configure the sandboxed Bash tool Claude Code CLI · in the page sandboxing …the machine, including credential files such as `~/.ssh` and `~/.aws/credentials` | [`filesystem.denyRead`](https://code.claude.com/docs/en/settings-reference#sandbox-filesystem-denyread), [`credenti… Security Claude Code CLI · in the page security …on your own infrastructure, where isolation, network egress, and git credentials are your deployment's responsibility. In Anthropic-hosted environments: * **Isolated virtual machines**: Each cloud s… Catch security issues as Claude writes code Claude Code CLI · in the page security-guidance …s: ["sk_live_", "AKIA"] reminder: "Hardcoded API key prefix. Load credentials from the secret manager." - rule_name: tenant_unfiltered_query regex: "\\.objects\\.all\\(\\)" paths: ["**/s… Self-hosted environments Claude Code CLI · in the page self-hosted-environments …n your host to run it. The runner authenticates to your git host with credentials you configure; [Configure git](https://code.claude.com/docs/en/self-hosted-environments-deploy.md#configure-git) cover… Customize sessions in self-hosted environments Claude Code CLI · in the page self-hosted-environments-configuration …self-hosted environment sessions with wrapper scripts for per-session credentials, lifecycle hooks, and on-demand runner spawning. > [!NOTE] > > Self-hosted environments are in public beta on Team an… Deploy self-hosted environments to production Claude Code CLI · in the page self-hosted-environments-deploy …unners in production: security hardening, network egress control, git credentials, Kubernetes and Compose recipes, and troubleshooting. > [!NOTE] > > Self-hosted environments are in public beta on Te… Verify session identity in self-hosted environments Claude Code CLI · in the page self-hosted-environments-identity …reject tokens issued to any other organization's environment. * Scope credentials you derive from the token to what a single coding session should be able to do, not to everything the session's creato… Self-hosted environments quickstart Claude Code CLI · in the page self-hosted-environments-quickstart …ts-deploy.md), which covers the security posture, egress control, git credentials, and orchestration. ## Prerequisites ### Organization and roles The claude.ai side needs: * **Allow self-hosted en… Test self-hosted environments end to end Claude Code CLI · in the page self-hosted-environments-testing …Code stores the token in the OS keychain on macOS, or in `~/.claude/.credentials.json` on Linux and Windows. On a macOS host whose Keychain can't be written, as is typical in an SSH session where the… Configure server-managed settings Claude Code CLI · in the page server-managed-settings …upported. See [Platform availability](#platform-availability) for the credentials and platforms that qualify. > [!NOTE] > > Server-managed settings are available for [Claude for Teams](https://claude… Claude Code settings Claude Code CLI · in the page settings …| | `sandbox.credentials` | An invalid entry in `files` or `envVars` that still has a valid `path` or `name` and a `mode` of `mask` or… All settings Claude Code CLI · in the page settings-reference …le | | [`awsAuthRefresh`](#awsauthrefresh) | Refresh expired [Bedrock credentials](https://code.claude.com/docs/en/amazon-bedrock.md#advanced-credential-configuration) in `.aws` with your own command… Enterprise deployment overview Claude Code CLI · in the page third-party-integrations …tication.md#sign-in-without-an-api-key)</td> <td>API key or AWS credentials</td> <td>API key or AWS credentials</td> <td>GCP credentials</td> <td>API key or Microsoft Entra ID<… Tools reference Claude Code CLI · in the page tools-reference …int to connect to. Must be a `ws://` or `wss://` URL with no embedded credentials or whitespace, using ASCII characters only | | `protocols` | No | WebSocket subprotocol names to offer during the hand… Troubleshoot installation and login Claude Code CLI · in the page troubleshoot-install …opic-services) in the Error reference | | `Could not load the default credentials` or `Could not load credentials from any providers` | [Amazon Bedrock, Google Cloud's Agent Platform, or Microsoft Fou… Troubleshooting Claude Code CLI · in the page troubleshooting …, Amazon Bedrock, Google Cloud's Agent Platform, or Microsoft Foundry credentials | [Troubleshoot installation and login](https://code.claude.com/docs/en/troubleshoot-install.md#login-and-authenticati… Find bugs with ultrareview Claude Code CLI · in the page ultrareview …irements, and what happens to uncommitted changes in files named like credentials or keys, such as `.env` and `*.tfvars` files. When you [review a pull request](#review-a-pull-request), Claude Code up… Use Claude Code in VS Code Claude Code CLI · in the page vs-code ….1.229 or later. On a third-party provider, or without Anthropic credentials, nothing is sent. The dialog says so before you write. Submitting saves the report as a [local archive under `~/.claud… Get started with Claude Code in the cloud Claude Code CLI · in the page web-quickstart …s://claude.ai/customize/connectors). Disconnecting deletes the GitHub credentials your cloud sessions use, whether they came from the browser or from `/web-setup`, so cloud sessions lose GitHub access… Week 26 · June 22–26, 2026 Claude Code CLI · in the page whats-new/2026-w26 …rver's OAuth flow directly, and `claude mcp logout` clears the stored credentials. Run the OAuth flow for a configured server without opening a session: ```bash terminal theme={null} claude mcp logi… Week 36 · August 31 – September 4, 2026 Claude Code CLI · in the page whats-new/2026-w36 ….md#what-the-classifier-blocks-by-default) actions such as requesting credentials from the cloud instance-metadata endpoint or connecting to sibling containers that Claude didn't startIn auto mode, Cl… What's new Claude Code CLI · in the page whats-new/index …ur shell instead of the interactive `/mcp` menu, and clear its stored credentials later with `claude mcp logout`. Also this week: **shell mode responds to command output** (`! npm test` gets an expla… Admin controls Claude Documentation · in the page claude-science/admin-controls …adds a GitHub token in the Claude Science app under **Settings** > **Credentials**. To stop members from adding their own skills, turn off the **Allow custom skills** switch on the **Organization se…