issuer
A Claude Code settings key, read out of the shipped bundle. It was in the build from v2.1.287 and was gone by v2.1.307.
MCP OAuth token refresh retries smarter and keeps your saved redirect URI across reconnects.
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.221.
In the changelogs
8Releases whose published page names issuer.
-
v2.1.265
CRI/gateway loopback config validator gains an escape-hatch env var
Gateway loopback check now also covers cri.issuer and cri.policy.webhook.url, not just cri.jwks_url
found in this entry's text
-
v2.1.228
Gateway gains a second admission path for machine identities
The self-hosted gateway can admit machine identities that skip managed-settings policy entirely, off by default.
found in this entry's text
-
v2.1.228
Gateway customer-routed inference config, disabled by default
The self-hosted gateway accepts a strict customer-routed inference config block, off unless you enable it.
found in this entry's text
-
v2.1.224
MCP servers checked for the issuer they echo back
Claude checks whether an MCP server points authentication elsewhere, logging mismatches without blocking.
found in this entry's text
-
v2.1.221
MCP OAuth refresh retries on error codes and preserves issuer and redirect URI
MCP OAuth token refresh retries smarter and keeps your saved redirect URI across reconnects.
found in this entry's text
-
v2.1.221
MCP OAuth tracks the issuer through the callback and token exchange
MCP OAuth now tracks which authorization server issued your token through login, refresh, and storage.
found in this entry's text
-
v2.1.221
MCP OAuth handles the RFC 9207 issuer parameter
MCP OAuth logins now verify the issuer and give clearer errors when client registration is rejected.
found in this entry's text
-
v2.1.83
XAA IdP Authentication for MCP Servers
found in this entry's text
First cited
0No release's published evidence quotes this name. The ledger indexes the Evidence lines of every changelog on this site, so this says nobody here has ever quoted it; it says nothing about how old the name is.
Presence across releases
4Build by build
20One row per release since the first build this name was read out of. Absent means the build was read and the name was not in it, never mined means no bundle for that release was ever archived, and a declared type or a default is only ever what that release's own bundle stated.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.