{"name":"credentials","slug":"credentials","family":"setting","title":"Settings keys","noun":"settings key","description":"AWS calls from inside the sandbox now work with masked credentials, since the proxy re-signs them for you.","description_source":"entry","described_by":{"version":"2.1.221","anchor":"sandbox-proxy-re-signs-aws-sigv4-requests-made-with-masked-c"},"presence":{"first_seen":"2.1.315","removed_in":"2.1.317","in_current_build":false,"newest_mined":"2.1.319","builds":2,"mined_builds":159,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.295","anchor":"credential-file-path-check-factored-out-and-extended-to-a-rh","heading":"Sensitive-file check covers git, GitHub CLI and gcloud credential files","line":"Claude Code's check for sensitive file paths now lists stored credential files for git, the GitHub CLI and gcloud","released_at":"2026-10-08 18:22:58","reason":"found in this entry's text"},{"version":"2.1.285","anchor":"aws-client-credentialsconfigprofile-ignored-with-warning","heading":"Amazon Bedrock now checks environment credentials first","line":"Bedrock sign-in now tries AWS keys from environment variables first, and ignores `credentials`, `config` and `profile` with a warning","released_at":"2026-09-29 17:32:09","reason":"found in this entry's text"},{"version":"2.1.277","anchor":"api-client-builder-gains-a-permissioncontext-parameter-and-q","heading":"API client builder gains a permissionContext parameter and querySource default","line":"The internal API client builder gained a permissionContext parameter and a querySource setting","released_at":"2026-09-18 16:22:26","reason":"found in this entry's text"},{"version":"2.1.271","anchor":"configstatusstatsusage-dialog-now-takes-explicit-host-pro","heading":"Config\/Status\/Stats\/Usage dialog now takes explicit host props instead of a bundled context object","line":"Config, status, stats and usage dialogs now receive explicit props instead of one bundled context object","released_at":"2026-09-14 19:45:19","reason":"found in this entry's text"},{"version":"2.1.269","anchor":"webfetchartifact-read-tool-also-moves-to-create-instanc","heading":"WebFetch\/artifact-read tool also moves to create() instance pattern with new renderToolUseMessage and prompt hook","line":"The WebFetch tool moves to the newer `create()` internal structure and gains a verbose-mode message and prompt hook","released_at":"2026-09-11 18:12:49","reason":"found in this entry's text"},{"version":"2.1.268","anchor":"advisor-tool-model-resolution-path-now-also-receives-creden","heading":"Advisor tool model-resolution path now also receives credentials","line":"Model-resolution during the main loop now also receives credentials, and the advisor-tool consent call was renamed","released_at":"2026-09-10 18:41:11","reason":"found in this entry's text"},{"version":"2.1.242","anchor":"plugin-and-marketplace-code-carries-credentials-alongside-st","heading":"Plugin and marketplace code carries credentials alongside storage","line":"Plugin install, enable and marketplace flows now carry credentials into every plugin store operation.","released_at":"2026-08-24 19:16:14","reason":"found in this entry's text"},{"version":"2.1.239","anchor":"credentials-are-handed-down-rather-than-read-from-global-sta","heading":"Credentials are handed down rather than read from global state","line":"Credentials are now passed explicitly into most subsystems rather than read from a global store.","released_at":"2026-08-21 17:18:54","reason":"found in this entry's text"},{"version":"2.1.239","anchor":"the-same-credential-threading-reaches-tool-and-billing-call-","heading":"The same credential threading reaches tool and billing call sites","line":"Billing, artifact, MCP and subagent call sites also take credentials explicitly now.","released_at":"2026-08-21 17:18:54","reason":"found in this entry's text"},{"version":"2.1.221","anchor":"sandbox-proxy-re-signs-aws-sigv4-requests-made-with-masked-c","heading":"Sandbox proxy re-signs AWS SigV4 requests made with masked credentials","line":"AWS calls from inside the sandbox now work with masked credentials, since the proxy re-signs them for you.","released_at":"2026-08-03 22:16:25","reason":"found in this entry's text"}],"entries_total":12,"docs":[{"source":"api","path":"about-claude\/use-case-guides\/commerce-agents","title":"commerce-agents","documented":false},{"source":"api","path":"agents-and-tools\/agent-skills\/enterprise","title":"enterprise","documented":false},{"source":"api","path":"agents-and-tools\/agent-skills\/quickstart","title":"quickstart","documented":false},{"source":"api","path":"agents-and-tools\/mcp-connector","title":"mcp-connector","documented":false},{"source":"api","path":"agents-and-tools\/mcp-tunnels\/concepts","title":"concepts","documented":false},{"source":"api","path":"agents-and-tools\/mcp-tunnels\/deploy-helm","title":"deploy-helm","documented":false},{"source":"api","path":"agents-and-tools\/mcp-tunnels\/overview","title":"overview","documented":false},{"source":"api","path":"agents-and-tools\/mcp-tunnels\/security","title":"security","documented":false},{"source":"api","path":"agents-and-tools\/remote-mcp-servers","title":"remote-mcp-servers","documented":false},{"source":"api","path":"agents-and-tools\/tool-use\/bash-tool","title":"bash-tool","documented":false}],"docs_total":12,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/credentials","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}