{"version":"2.1.223","anchor":"settings-supplied-api-and-credential-env-vars-are-stripped-w","canonical_anchor":"settings-supplied-api-and-credential-env-vars-are-stripped-w","heading":"Settings-supplied API and credential env vars are stripped when ANTHROPIC_UNIX_SOCKET is set","tier":"notice","area":"Auth","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.223\/e\/settings-supplied-api-and-credential-env-vars-are-stripped-w","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.223","markdown":"### Settings-supplied API and credential env vars are stripped when ANTHROPIC_UNIX_SOCKET is set\n\nWhen you connect through a unix socket, settings files can no longer override your API keys or endpoint.\n\n**What**\n\nWhen Claude Code talks to a unix socket, env vars coming from settings files can no longer redirect or re-credential that connection.\n\n**Details**\n\n- Env vars applied from settings are filtered through a deny set covering ANTHROPIC_UNIX_SOCKET, ANTHROPIC_BASE_URL, ANTHROPIC_API_KEY, ANTHROPIC_AUTH_TOKEN, CLAUDE_CODE_OAUTH_TOKEN, and every CLAUDE_CODE_ARTIFACT* variable.\n- Only applies when process.env.ANTHROPIC_UNIX_SOCKET is set; otherwise settings env vars are applied as before.\n\n**Evidence**\n\n`ANTHROPIC_UNIX_SOCKET`\n\n- Area: Auth\n- Names: `ANTHROPIC_UNIX_SOCKET`, `ANTHROPIC_BASE_URL`, `ANTHROPIC_API_KEY`, `ANTHROPIC_AUTH_TOKEN`, `CLAUDE_CODE_OAUTH_TOKEN`\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 0\/5"}