{"name":"ANTHROPIC_AUTH_TOKEN","slug":"anthropic-auth-token","family":"env","title":"Environment variables","noun":"environment variable","description":"Custom value for the `Authorization` header (the value you set here will be prefixed with `Bearer `)","description_source":"docs","described_by":{"doc":"claude-code\/env-vars","title":"Environment variables"},"presence":{"first_seen":"2.1.138","removed_in":null,"in_current_build":true,"newest_mined":"2.1.308","builds":149,"mined_builds":149,"first_cited":{"version":"2.1.257","released_at":"2026-09-01 17:15:33","spans":4}},"aliases":[],"entries":[{"version":"2.1.307","anchor":"auth-token-forwarding-to-custom-anthropic-base-url-simplifie","heading":"Fewer conditions before ANTHROPIC_AUTH_TOKEN is sent to a custom address","line":"Claude Code dropped one check that could stop `ANTHROPIC_AUTH_TOKEN` from being sent to a matching `ANTHROPIC_BASE_URL`","released_at":"2026-10-21 20:47:18","reason":"named in this entry, found in this entry's text"},{"version":"2.1.302","anchor":"host-auth-is-org-sign-in-hidden-flag","heading":"Desktop apps can say their token is an Anthropic organization sign-in","line":"A hidden `--host-auth-is-org-sign-in` flag tells Claude Code that a desktop app's `ANTHROPIC_AUTH_TOKEN` is an organization sign-in it obtained","released_at":"2026-10-16 16:48:28","reason":"found in this entry's text, named in this entry"},{"version":"2.1.299","anchor":"gateway-token-check-dropped-audclaude-gateway-requirement","heading":"Gateway tokens no longer need to be marked for claude-gateway","line":"Claude Code no longer requires `ANTHROPIC_AUTH_TOKEN` to name claude-gateway as its audience and uses a different check instead","released_at":"2026-10-14 00:23:19","reason":"found in this entry's text, named in this entry"},{"version":"2.1.296","anchor":"cloud-session-availability-message-names-the-credential-in-u","heading":"Cloud sessions message names the key or token whose organization was checked","line":"When cloud sessions are blocked by organization policy, the message now says which API key or token Claude Code checked the policy for","released_at":"2026-10-09 16:58:10","reason":"found in this entry's text"},{"version":"2.1.285","anchor":"ssh-placeholder-credential-detection","heading":"Detection of sign-in forwarded over SSH now checks for a placeholder","line":"Claude Code recognises SSH-forwarded sign-in when a socket is set and exactly one credential variable holds the value ssh-placeholder","released_at":"2026-09-29 17:32:09","reason":"found in this entry's text"},{"version":"2.1.284","anchor":"detailed-error-when-managed-login-policy-conflicts-with-an-a","heading":"Clearer error when a managed login policy clashes with your API key or token","line":"When managed settings require a specific sign-in but another credential is set, the error names that credential, where it came from, and how to fix it","released_at":"2026-09-28 17:11:59","reason":"found in this entry's text"},{"version":"2.1.266","anchor":"cloud-gateway-sign-in-error-message-shortened","heading":"Cloud gateway sign-in error message shortened","line":"The Cloud gateway sign-in error message dropped its instructions for CLAUDE_CODE_USE_GATEWAY, ANTHROPIC_BASE_URL and ANTHROPIC_AUTH_TOKEN","released_at":"2026-09-08 23:32:32","reason":"named in this entry, found in this entry's text"},{"version":"2.1.265","anchor":"cloud-gateway-sign-in-check-reworked-with-desktop-app-aware","heading":"Cloud gateway sign-in check reworked with desktop-app-aware error and new required flag","line":"Cloud gateway sign-in check reworked with a clearer error and desktop-app-aware handling","released_at":"2026-09-08 19:05:16","reason":"found in this entry's text"},{"version":"2.1.257","anchor":"new-gateway-credential-hand-off-lock-retry","heading":"New gateway credential hand-off lock retry","line":"A gateway credential hand-off file locked by another process, such as antivirus, is now retried once instead of failing.","released_at":"2026-09-01 17:15:33","reason":"found in this entry's text, named in this entry"},{"version":"2.1.257","anchor":"gateway-auth-token-can-now-come-from-a-descriptorsnapshot","heading":"Gateway auth token can now come from a descriptor\/snapshot, not just env var","line":"The gateway token can come from a stored descriptor or snapshot when ANTHROPIC_AUTH_TOKEN is unset, with a clearer warning.","released_at":"2026-09-01 17:15:33","reason":"found in this entry's text, named in this entry"}],"entries_total":20,"docs":[{"source":"claude-code","path":"env-vars","title":"Environment variables","documented":true},{"source":"api","path":"build-with-claude\/claude-in-microsoft-foundry","title":"claude-in-microsoft-foundry","documented":false},{"source":"api","path":"cli-sdks-libraries\/cli\/authentication","title":"On a remote host without a browser:","documented":false},{"source":"api","path":"cli-sdks-libraries\/sdks\/csharp","title":"csharp","documented":false},{"source":"api","path":"cli-sdks-libraries\/sdks\/java","title":"java","documented":false},{"source":"api","path":"manage-claude\/admin-api","title":"admin-api","documented":false},{"source":"api","path":"manage-claude\/wif-admin-api","title":"wif-admin-api","documented":false},{"source":"api","path":"manage-claude\/wif-reference","title":"wif-reference","documented":false},{"source":"api","path":"manage-claude\/workload-identity-federation","title":"workload-identity-federation","documented":false},{"source":"api","path":"release-notes\/overview","title":"overview","documented":false}],"docs_total":13,"gates":[],"related":[{"name":"ANTHROPIC_API_KEY","slug":"anthropic-api-key","description":"API key sent as `X-Api-Key` header. When set, this key is used instead of your Claude Pro, Max, Team, or Enterprise subscription even if you are logged in. In non-interactive mode (`-p`), the key is always used when present. In interactive mode, you are prompted to approve the key once before it overrides your subscription. To use your subscription instead, run `unset ANTHROPIC_API_KEY`"},{"name":"ANTHROPIC_AWS_API_KEY","slug":"anthropic-aws-api-key","description":"Workspace API key for [Claude Platform on AWS](\/docs\/en\/claude-platform-on-aws), generated in the AWS Console. Sent as `x-api-key` and takes precedence over AWS SigV4"},{"name":"ANTHROPIC_AWS_BASE_URL","slug":"anthropic-aws-base-url","description":"Override the [Claude Platform on AWS](\/docs\/en\/claude-platform-on-aws) endpoint URL. Use for custom regions or when routing through an [LLM gateway](\/docs\/en\/llm-gateway). Defaults to `https:\/\/aws-external-anthropic.{region}.api.aws`. Claude Code resolves the region with the [same precedence as on Amazon Bedrock](\/docs\/en\/amazon-bedrock#3-configure-claude-code)"},{"name":"ANTHROPIC_AWS_WORKSPACE_ID","slug":"anthropic-aws-workspace-id","description":"Required for [Claude Platform on AWS](\/docs\/en\/claude-platform-on-aws). Sent on every request as the `anthropic-workspace-id` header"},{"name":"ANTHROPIC_BASE_URL","slug":"anthropic-base-url","description":"Override the API endpoint to route requests through a proxy or gateway. When set to a non-first-party host, [MCP tool search](\/docs\/en\/mcp#scale-with-mcp-tool-search) is disabled by default. Set `ENABLE_TOOL_SEARCH=true` if your proxy forwards `tool_reference` blocks. As of v2.1.196, [Remote Control](\/docs\/en\/remote-control#requirements) is disabled when this points at a host other than `api.anthropic.com`, matching its behavior on Amazon Bedrock, Google Cloud's Agent Platform, and Microsoft Foundry"},{"name":"ANTHROPIC_BEDROCK_BASE_URL","slug":"anthropic-bedrock-base-url","description":"Override the Amazon Bedrock endpoint URL. Use for custom Amazon Bedrock endpoints or when routing through an [LLM gateway](\/docs\/en\/llm-gateway). See [Amazon Bedrock](\/docs\/en\/amazon-bedrock)"},{"name":"ANTHROPIC_BEDROCK_MANTLE_BASE_URL","slug":"anthropic-bedrock-mantle-base-url","description":"Override the Amazon Bedrock Mantle endpoint URL. See [Mantle endpoint](\/docs\/en\/amazon-bedrock#use-the-mantle-endpoint)"},{"name":"ANTHROPIC_BEDROCK_REGION_PREFIX","slug":"anthropic-bedrock-region-prefix","description":"Cross-region inference profile prefix (`us`, `eu`, `apac`, `jp`, `au`, or `global`) Claude Code tries first instead of the one derived from the AWS region. Ignored in AWS GovCloud regions. Requires Claude Code v2.1.224 or later. See [Amazon Bedrock](\/docs\/en\/amazon-bedrock#cross-region-inference-profile-prefixes)"},{"name":"ANTHROPIC_BEDROCK_SERVICE_TIER","slug":"anthropic-bedrock-service-tier","description":"Amazon Bedrock [service tier](https:\/\/docs.aws.amazon.com\/bedrock\/latest\/userguide\/service-tiers-inference.html) (`default`, `flex`, or `priority`). Sent as the `X-Amzn-Bedrock-Service-Tier` header. See [Amazon Bedrock](\/docs\/en\/amazon-bedrock#service-tiers)"},{"name":"ANTHROPIC_BETAS","slug":"anthropic-betas","description":"Comma-separated list of additional `anthropic-beta` header values to include in API requests. Claude Code already sends the beta headers it needs; use this to opt into an [Anthropic API beta](https:\/\/platform.claude.com\/docs\/en\/api\/beta-headers) before Claude Code adds native support. Unlike the [`--betas` flag](\/docs\/en\/cli-reference#cli-flags), which requires API key authentication, this variable works with all auth methods including Claude.ai subscription"}],"url":"https:\/\/changelogs.core-directive.com\/reference\/env\/anthropic-auth-token","family_url":"https:\/\/changelogs.core-directive.com\/reference\/env.json"}