{"version":"2.1.111","anchor":"proxy-authentication-helper","canonical_anchor":"proxy-authentication-helper","heading":"Proxy Authentication Helper","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.111\/e\/proxy-authentication-helper","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.111","markdown":"### Proxy Authentication Helper\n\n**What**\n\nEnterprise users behind authenticated proxies can now configure a shell command that provides proxy authentication headers, avoiding manual credential management.\n\n**Usage**\n\n`# Enable the proxy auth helper export CLAUDE_CODE_ENABLE_PROXY_AUTH_HELPER=1 # Optionally configure the cache TTL (in milliseconds) export CLAUDE_CODE_PROXY_AUTH_HELPER_TTL_MS=60000` Configure `proxyAuthHelper` in your project or local settings to specify the shell command that outputs a `Proxy-Authorization` header value.\n\n**Details**\n\n- When enabled, Claude Code runs the configured helper command to obtain proxy auth credentials\n- Credentials are cached with a configurable TTL (via `CLAUDE_CODE_PROXY_AUTH_HELPER_TTL_MS`)\n- If the helper is configured in project\/local settings, workspace trust must be accepted before it runs\n- HTTP 407 (Proxy Authentication Required) responses now trigger automatic re-authentication\n- The `Proxy-Authenticate` header from 407 responses is passed to the helper as `CLAUDE_CODE_PROXY_AUTHENTICATE`\n- Helper failures are logged with details and fall back to previously cached credentials\n- The feature is marked \"EAP\" (Early Access Program) in the settings description\n\n**Evidence**\n\nProxy auth helper in `f08()` at line ~100631 (search for `\"proxyAuthHelper\"`) \u2014 0 occurrences in v2.1.110, 7 in v2.1.111"}