Settings-supplied API and credential env vars are stripped when…

Settings-supplied API and credential env vars are stripped when ANTHROPIC_UNIX_SOCKET is set

When you connect through a unix socket, settings files can no longer override your API keys or endpoint.

You'll noticeTier: how much it should matter to you

2Useful: my rating, 1 to 5

0Signal: worth watching, 1 to 5

AuthArea: what it touches

ImprovementsKind: in v2.1.223, 05 Aug 26

ImprovementsSection of the release

What

When Claude Code talks to a unix socket, env vars coming from settings files can no longer redirect or re-credential that connection.

Details

Env vars applied from settings are filtered through a deny set covering ANTHROPIC_UNIX_SOCKET, ANTHROPIC_BASE_URL, ANTHROPIC_API_KEY, ANTHROPIC_AUTH_TOKEN, CLAUDE_CODE_OAUTH_TOKEN, and every CLAUDE_CODE_ARTIFACT* variable.
Only applies when process.env.ANTHROPIC_UNIX_SOCKET is set; otherwise settings env vars are applied as before.

Evidence

ANTHROPIC_UNIX_SOCKET

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Read from

The build it came inv2.1.223

5 Aug 2026 · 201 entries, this one is #110.

Either side of it

Open the release →

Names in this entry

envANTHROPIC_UNIX_SOCKET
Environment variables your org policy blocks can no longer sneak through by changing their capitalization.
envANTHROPIC_BASE_URL
Override the API endpoint to route requests through a proxy or gateway. When set to a non-first-party host, MCP tool search is disabled by default. Set ENABLE_TOOL_SEARCH=true if your proxy forwards tool_reference blocks. As of v2.1.196, Remote Control is disabled when this points at a host other than api.anthropic.com, matching its behavior on Amazon Bedrock, Google Cloud's Agent Platform, and Microsoft Foundry
envANTHROPIC_API_KEY
API key sent as X-Api-Key header. When set, this key is used instead of your Claude Pro, Max, Team, or Enterprise subscription even if you are logged in. In non-interactive mode (-p), the key is always used when present. In interactive mode, you are prompted to approve the key once before it overrides your subscription. To use your subscription instead, run unset ANTHROPIC_API_KEY
envANTHROPIC_AUTH_TOKEN
Custom value for the Authorization header (the value you set here will be prefixed with Bearer )
envCLAUDE_CODE_OAUTH_TOKEN
Three artifact environment variables are now recognised, with the API token stripped from spawned processes as a secret.
envCLAUDE_CODE_ARTIFACT
PR review artifact pages can show a pinned button that approves the pull request from your GitHub account.

Is this right?

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.