{"name":"CLAUDE_CODE_HOST_CREDS_FILE","slug":"claude-code-host-creds-file","family":"env","title":"Environment variables","noun":"environment variable","description":"A trailing slash in your host credentials file path no longer changes whether the rule matches.","description_source":"entry","described_by":{"version":"2.1.224","anchor":"host-credentials-path-normalised-like-every-other-sandbox-ru"},"presence":{"first_seen":"2.1.198","removed_in":null,"in_current_build":true,"newest_mined":"2.1.308","builds":99,"mined_builds":149,"first_cited":{"version":"2.1.224","released_at":"2026-08-07 01:36:32","spans":2}},"aliases":[],"entries":[{"version":"2.1.302","anchor":"claude-code-auto-mode-model-added-to-a-list-that-includes-cl","heading":"CLAUDE_CODE_AUTO_MODE_MODEL now sits on a list of environment variables","line":"Claude Code now lists `CLAUDE_CODE_AUTO_MODE_MODEL` with `PATH`, `CLAUDE_CODE_EXTRA_BODY` and `CLAUDE_CODE_HOST_CREDS_FILE`, and refers to it in more places","released_at":"2026-10-16 16:48:28","reason":"found in this entry's text"},{"version":"2.1.283","anchor":"served-calls-blocked-from-reading-or-changing-credential-sto","heading":"Cloud sessions running tools on your machine cannot reach its credentials","line":"Tool calls forwarded from a cloud session are blocked from reading or changing your machine's keychains and credential files","released_at":"2026-09-25 18:46:11","reason":"found in this entry's text"},{"version":"2.1.281","anchor":"claude-code-host-gateway-lineage-new-env-var-that-marks-s","heading":"CLAUDE_CODE_HOST_GATEWAY_LINEAGE : new env var that marks sessions spawned by a Claude Desktop gateway","line":"New CLAUDE_CODE_HOST_GATEWAY_LINEAGE variable keeps child processes of a Desktop-hosted gateway session treated as host-managed","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text"},{"version":"2.1.281","anchor":"host-credential-cache-key-includes-appdata-and-localappdata","heading":"Host-credential cache key includes APPDATA and LOCALAPPDATA","line":"The host-credential cache now resets when APPDATA or LOCALAPPDATA change, as well as its earlier inputs","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text"},{"version":"2.1.257","anchor":"new-host-credential-file-protection-glob-for-read-denials","heading":"New host-credential file protection glob for read denials","line":"An always-deny rule now stops tools reading Claude's own credential and config files, including backups and swap files.","released_at":"2026-09-01 17:15:33","reason":"found in this entry's text, named in this entry"},{"version":"2.1.224","anchor":"host-credentials-path-normalised-like-every-other-sandbox-ru","heading":"Host credentials path normalised like every other sandbox rule","line":"A trailing slash in your host credentials file path no longer changes whether the rule matches.","released_at":"2026-08-07 01:36:32","reason":"named in this entry, found in this entry's text"}],"entries_total":6,"docs":[],"docs_total":0,"gates":[],"related":[{"name":"CLAUDE_CODE_HOST_AUTH_ENV_VAR","slug":"claude-code-host-auth-env-var","description":"When Claude Code removes certain environment variables, it now keeps the one named by `CLAUDE_CODE_HOST_AUTH_ENV_VAR`"},{"name":"CLAUDE_CODE_HOST_AUTH_REFRESH_TIMEOUT_MS","slug":"claude-code-host-auth-refresh-timeout-ms","description":"Milliseconds Claude Code waits for the SDK host to answer a `host_auth_token_refresh` control request, used by the refresh hook registered when `CLAUDE_CODE_SDK_HAS_HOST_AUTH_REFRESH` is set. Default `30000`; an unset, empty, `0` or non-numeric value uses the default."},{"name":"CLAUDE_CODE_HOST_GATEWAY_LINEAGE","slug":"claude-code-host-gateway-lineage","description":"New CLAUDE_CODE_HOST_GATEWAY_LINEAGE variable keeps child processes of a Desktop-hosted gateway session treated as host-managed"},{"name":"CLAUDE_CODE_HOST_PLATFORM","slug":"claude-code-host-platform","description":"A value of `win32`, `darwin` or `linux` replaces the real `process.platform` as the `platform` Claude Code reports alongside its version and account ids and in its environment details; any other value falls back to the real platform. The raw value is also reported as `platformRaw` (`linux` when unset) and read as the `hostPlatform` fact during environment detection."},{"name":"CLAUDE_CODE_HOST_PROMPT_SUPERSEDES_RECORD","slug":"claude-code-host-prompt-supersedes-record","description":"`CLAUDE_CODE_HOST_PROMPT_SUPERSEDES_RECORD`, `CLAUDE_CODE_MCP_SERVE_SETTINGS` and `CLAUDE_CODE_DISABLE_WEB_FETCH` are now passed along"},{"name":"CLAUDE_CODE_HOST_SCHEDULED_RUN","slug":"claude-code-host-scheduled-run","description":"Scheduled-run tasks can now report why they fired, but only if the host explicitly opts in via CLAUDE_CODE_HOST_SCHEDULED_RUN=1"},{"name":"CLAUDE_CODE_HOST_SESSION_ID","slug":"claude-code-host-session-id","description":"Claude Code now recognizes a CLAUDE_CODE_HOST_SESSION_ID environment variable"},{"name":"CLAUDE_CODE_HOST_SKILL_CATALOG","slug":"claude-code-host-skill-catalog","description":"In remote sessions, `CLAUDE_CODE_HOST_SKILL_CATALOG` can list the skills allowed to load, and invalid values are ignored with a warning"},{"name":"CLAUDE_CODE_HOST_WORKTREE","slug":"claude-code-host-worktree","description":"Two new environment variables let an embedding app block file writes inside chosen paths, except inside one declared worktree"},{"name":"CLAUDE_CODE_HOST_WORKTREE_FENCE","slug":"claude-code-host-worktree-fence","description":"Two new environment variables let an embedding app block file writes inside chosen paths, except inside one declared worktree"}],"url":"https:\/\/changelogs.core-directive.com\/reference\/env\/claude-code-host-creds-file","family_url":"https:\/\/changelogs.core-directive.com\/reference\/env.json"}