What
Enterprise users behind authenticated proxies can now configure a shell command that provides proxy authentication headers, avoiding manual credential management.
Usage
# Enable the proxy auth helper
export CLAUDE_CODE_ENABLE_PROXY_AUTH_HELPER=1
# Optionally configure the cache TTL (in milliseconds)
export CLAUDE_CODE_PROXY_AUTH_HELPER_TTL_MS=60000Configure proxyAuthHelper in your project or local settings to specify the shell command that outputs a Proxy-Authorization header value.
Details
- When enabled, Claude Code runs the configured helper command to obtain proxy auth credentials
- Credentials are cached with a configurable TTL (via
CLAUDE_CODE_PROXY_AUTH_HELPER_TTL_MS) - If the helper is configured in project/local settings, workspace trust must be accepted before it runs
- HTTP 407 (Proxy Authentication Required) responses now trigger automatic re-authentication
- The
Proxy-Authenticateheader from 407 responses is passed to the helper asCLAUDE_CODE_PROXY_AUTHENTICATE - Helper failures are logged with details and fall back to previously cached credentials
- The feature is marked "EAP" (Early Access Program) in the settings description
Evidence
Proxy auth helper in f08() at line ~100631 (search for "proxyAuthHelper") — 0 occurrences in v2.1.110, 7 in v2.1.111
Strings lifted out of the shipped bundle, so the claim above can be checked against them.