{"name":"auth_failed","slug":"auth-failed","family":"setting","title":"Settings keys","noun":"settings key","description":"Plugin eval checks your credentials first and aborts instead of failing every case.","description_source":"entry","described_by":{"version":"2.1.233","anchor":"plugin-eval-checks-your-credentials-before-running-any-case"},"presence":{"first_seen":"2.1.301","removed_in":"2.1.302","in_current_build":false,"newest_mined":"2.1.308","builds":1,"mined_builds":149,"first_cited":{"version":"2.1.260","released_at":"2026-09-03 22:32:02","spans":1}},"aliases":[],"entries":[{"version":"2.1.305","anchor":"set-model-errors-split-into-finer-reason-codes","heading":"Failed model changes now report a more specific reason","line":"When a controlling program's request to change the model fails, Claude Code now reports a finer reason, such as rate limit or failed sign-in","released_at":"2026-10-20 19:29:36","reason":"found in this entry's text"},{"version":"2.1.296","anchor":"tool-denial-monitor-marker-and-a-new-denial-kind","heading":"Changes to how blocked tool actions are marked and shown","line":"Tool results can now be marked as blocked by a denial check, and a new \"model not current\" denial reason was added","released_at":"2026-10-09 16:58:10","reason":"found in this entry's text"},{"version":"2.1.281","anchor":"model-switch-rejections-now-return-a-machine-readable-code","heading":"Model switch rejections now return a machine-readable code","line":"A blocked model switch now returns a `code` field naming the reason, such as `restricted_by_org` or `catalog_unknown`","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text"},{"version":"2.1.261","anchor":"new-not-fetchedno-response-diagnostics-for-organization","heading":"New 'not fetched'\/'no response' diagnostics for organization policy retrieval","line":"Diagnostics now explain in detail why org policy couldn't be fetched, with specific failure reasons.","released_at":"2026-09-04 17:49:34","reason":"found in this entry's text"},{"version":"2.1.260","anchor":"eval-suite-result-schema-gained-partial-run-reasons","heading":"Eval-suite result schema gained partial-run reasons","line":"Internal eval-suite results now record why a run was only partial.","released_at":"2026-09-03 22:32:02","reason":"found in this entry's text"},{"version":"2.1.242","anchor":"rebuilt-cloud-environments-get-back-deny-and-ask-rules-only","heading":"Rebuilt cloud environments get back deny and ask rules only","line":"If a cloud environment is rebuilt, only your deny and ask rules come back, not allows.","released_at":"2026-08-24 19:16:14","reason":"found in this entry's text"},{"version":"2.1.234","anchor":"plugin-eval-reference-rewritten-around-a-tighter-sandbox","heading":"Plugin eval reference rewritten around a tighter sandbox","line":"Plugin eval runs now happen in a tighter sandbox with their own git repo and home directory.","released_at":"2026-08-17 18:19:13","reason":"found in this entry's text"},{"version":"2.1.233","anchor":"plugin-eval-checks-your-credentials-before-running-any-case","heading":"Plugin eval checks your credentials before running any case","line":"Plugin eval checks your credentials first and aborts instead of failing every case.","released_at":"2026-08-14 18:50:44","reason":"found in this entry's text"},{"version":"2.1.233","anchor":"eval-suites-stop-at-the-first-authentication-failure","heading":"Eval suites stop at the first authentication failure","line":"An eval suite stops immediately when the first run is rejected for bad credentials.","released_at":"2026-08-14 18:50:44","reason":"found in this entry's text"},{"version":"2.1.205","anchor":"keychain-error-classification","heading":"Keychain error classification","line":null,"released_at":"2026-07-08 19:34:57","reason":"found in this entry's text"}],"entries_total":10,"docs":[{"source":"claude-code","path":"plugin-evals","title":"Test plugins with evals","documented":false}],"docs_total":1,"gates":[],"related":[{"name":"auth","slug":"auth","description":"Remote Control failures are labelled auth or terminal, and auth ones point you at \/login."},{"name":"auth.google","slug":"auth-google","description":"Each gateway telemetry.forward_to destination can now authenticate with a Google service account instead of only fixed headers"},{"name":"authFlow","slug":"authflow","description":"Sign-in for gateway\/Vertex can now route through the OS identity broker instead of a browser."},{"name":"author","slug":"author","description":"Coordinator messages forwarded to worker agents are labelled and escaped so they can't fake markup."},{"name":"authorityHost","slug":"authorityhost","description":"Legacy managed MCP server config fields now have a formal deprecation and rewrite system."},{"name":"authRejected","slug":"authrejected","description":null},{"name":"authServerMetadataUrl","slug":"authservermetadataurl","description":"Resetting an MCP server's sign-in details no longer forgets which authorization server it uses or which configured address supplied it"}],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/auth-failed","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}