Environment Variable Whitelist / Claude Code v1.0.111

What: Settings files (.claude/settings.json and .claude/settings.local.json) can now only set specific whitelisted environment variables.

Details:

The build it came inv1.0.111

10 Sep 2025 · 16 entries, this one is #5.

Either side of it

Open the release →

Names in this entry

envANTHROPIC_API_KEY
API key sent as X-Api-Key header. When set, this key is used instead of your Claude Pro, Max, Team, or Enterprise subscription even if you are logged in. In non-interactive mode (-p), the key is always used when present. In interactive mode, you are prompted to approve the key once before it overrides your subscription. To use your subscription instead, run unset ANTHROPIC_API_KEY
envANTHROPIC_MODEL
Name of the model setting to use (see Model Configuration)
envDISABLE_TELEMETRY
Editors and SDK hosts are told when telemetry is off so they can match.
envDISABLE_ERROR_REPORTING
Any non-empty value stops Claude Code from recording errors in its in-memory recent-error log and turns off the error-reporting path fed by logError and the uncaught-exception and unhandled-rejection handlers. Claude Code also copies the variable into the environment it builds for byoc sessions.
envHTTP_PROXY
Concurrent sandboxes now get unique proxy usernames instead of sharing one identity.
envHTTPS_PROXY
If a connection fails through your proxy, the error now names the proxy environment variable to check.
envMCP_TIMEOUT
Very large MCP_TIMEOUT values are capped instead of overflowing and timing out instantly.

Is this right?