credentials
A Claude Code settings key, read out of the shipped bundle. It was in the build from v2.1.315 and was gone by v2.1.317.
AWS calls from inside the sandbox now work with masked credentials, since the proxy re-signs them for you.
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.221.
In the changelogs
12Releases whose published page names credentials.
-
v2.1.295
Sensitive-file check covers git, GitHub CLI and gcloud credential files
Claude Code's check for sensitive file paths now lists stored credential files for git, the GitHub CLI and gcloud
found in this entry's text
-
v2.1.285
Amazon Bedrock now checks environment credentials first
Bedrock sign-in now tries AWS keys from environment variables first, and ignores
credentials,configandprofilewith a warningfound in this entry's text
-
v2.1.277
API client builder gains a permissionContext parameter and querySource default
The internal API client builder gained a permissionContext parameter and a querySource setting
found in this entry's text
-
v2.1.271
Config/Status/Stats/Usage dialog now takes explicit host props instead of a bundled context object
Config, status, stats and usage dialogs now receive explicit props instead of one bundled context object
found in this entry's text
-
v2.1.269
WebFetch/artifact-read tool also moves to
create()instance pattern with new renderToolUseMessage and prompt hookThe WebFetch tool moves to the newer
create()internal structure and gains a verbose-mode message and prompt hookfound in this entry's text
-
v2.1.268
Advisor tool model-resolution path now also receives
credentialsModel-resolution during the main loop now also receives credentials, and the advisor-tool consent call was renamed
found in this entry's text
-
v2.1.242
Plugin and marketplace code carries credentials alongside storage
Plugin install, enable and marketplace flows now carry credentials into every plugin store operation.
found in this entry's text
-
v2.1.239
Credentials are handed down rather than read from global state
Credentials are now passed explicitly into most subsystems rather than read from a global store.
found in this entry's text
-
v2.1.239
The same credential threading reaches tool and billing call sites
Billing, artifact, MCP and subagent call sites also take credentials explicitly now.
found in this entry's text
-
v2.1.221
Sandbox proxy re-signs AWS SigV4 requests made with masked credentials
AWS calls from inside the sandbox now work with masked credentials, since the proxy re-signs them for you.
found in this entry's text
-
v2.1.187
sandbox.credentials— Credential protection in sandboxfound in this entry's text
-
v2.1.131
Clearer API Authentication Error
found in this entry's text
First cited
0No release's published evidence quotes this name. The ledger indexes the Evidence lines of every changelog on this site, so this says nobody here has ever quoted it; it says nothing about how old the name is.
Presence across releases
2Build by build
5One row per release since the first build this name was read out of. Absent means the build was read and the name was not in it, never mined means no bundle for that release was ever archived, and a declared type or a default is only ever what that release's own bundle stated.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.