Pass --scm-connector-host to tunnel Anthropic requests into a GitHub Enterprise server only your network can reach.
What's wrong with this entry?
Passing --scm-connector-host opens a persistent WebSocket to Anthropic and proxies inbound HTTP requests to a GitHub Enterprise server that is only reachable from inside your network. --scm-connector-id is required alongside it, --scm-connector-provider defaults to ghe, and --scm-connector-ca-file supplies a custom CA. The connector is entirely off unless you pass the host flag.
- Requests are checked against a method allowlist, hop-by-hop headers are stripped, and paths that would escape the configured origin are refused.
- Frames asking to open a raw socket or a PTY (
wsOpen,ptyOpen) are rejected. - Close code 4003 means another orchestrator already holds this connector; it retries after 30 seconds.
--scm-connector-host-rewriteis documented as being for end-to-end testing only.
/v1/code/scm-connectors/{provider}/{id}/tunnel
Strings lifted out of the shipped bundle, so the claim above can be checked against them.